CVE-2020-35559
Summary
| CVE | CVE-2020-35559 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2021-02-16 16:15:00 UTC |
| Updated | 2021-02-19 20:11:00 UTC |
| Description | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an unused function that allows an authenticated attacker to use up all available IPs of an account and thus not allow creation of new devices and users. |
Risk And Classification
Problem Types: CWE-400
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Mbconnectline | Mbconnect24 | All | All | All | All |
| Application | Mbconnectline | Mymbconnect24 | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| MB connect line: Multiple vulnerabilites in mymbCONNECT24 and mbCONNECT24 <= 2.6.2 — German (Germany) | MISC | cert.vde.com | Third Party Advisory |
| Security Advice - MB connect line GmbH | MISC | mbconnectline.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.