Riskcovery

CVE-2020-12527

Improper Access Validation in products of MB connect line and Helmholz

State
Published
Severity
6.5 Medium
Published
Mar 2, 2021
Updated
Sep 16, 2024
Reserved
Apr 30, 2020

Read the record on cve.org

Description

An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. Improper access validation allows a logged in user to shutdown or reboot devices in his account without having corresponding permissions.

Scores

CVSSScoreVectorSource
3.16.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCERTVDE

Weaknesses

  • CWE-269 Improper Privilege Management

Affected Products

ProductVersions
mymbCONNECT24MB connect line
  • 2.6.2 through 2.11.2Affected
mbCONNECT24MB connect line
  • 2.6.2 through 2.11.2Affected
myREX24Helmholz
  • 2 through 2.11.2Affected
myREX24.virtualHelmholz
  • 2.11.2Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.