CVE-2024-23942

MB connect line: Configuration File on the client workstation is not encrypted

State: Published
Severity: 7.1 High
Published: Mar 18, 2025
Updated: Aug 20, 2025
Reserved: Jan 24, 2024

Description

A local user may find a configuration file on the client workstation with unencrypted sensitive data. This allows an attacker to impersonate the device or prevent the device from accessing the cloud portal which leads to a DoS.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H	CERTVDE

Weaknesses

CWE-312 Cleartext Storage of Sensitive Information

Affected Products

Product	Versions
mbCONNECT24MB connect line	before 2.16.2Affected
mbNETMB connect line	before 8.2.0Affected
mbNET.rokeyMB connect line	before 8.2.0Affected
mymbCONNECT24MB connect line	before 2.16.2Affected

References

https://cert.vde.com/en/advisories/VDE-2024-010

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.