CVE-2020-35559: Medium severity mbconnectline mymbconnect24 vulnerability
An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an unused function that allows an authenticated attacker to use up all available IPs of an account and thus not allow creation of new devices and users.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-35559?
The severity of CVE-2020-35559 is medium with a CVSS 3.1 score of 4.3.
Which software versions are affected by CVE-2020-35559?
MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 versions up to and including 2.6.2 are affected by CVE-2020-35559.
What is the impact of CVE-2020-35559?
An authenticated attacker can use up all available IPs of an account, preventing the creation of new devices and users.
How can I fix CVE-2020-35559?
Upgrade to a version higher than 2.6.2 of MB CONNECT LINE mymbCONNECT24 and mbCONNECT24.
Are there any references for CVE-2020-35559?
Yes, you can find more information about CVE-2020-35559 in the following references: [VDE-2021-003](https://cert.vde.com/de-de/advisories/vde-2021-003) and [mbCONNECTLINE Security Advice](https://mbconnectline.com/security-advice/).