CVE-2020-35559

MEDIUM

mymbCONNECT24 & mbCONNECT24 < 2.6.2 - Authenticated Resource Exhaustion via IP

Title source: llm
STIX 2.1

Description

An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an unused function that allows an authenticated attacker to use up all available IPs of an account and thus not allow creation of new devices and users.

References (2)

Core 2
Core References
Vendor Advisory x_refsource_misc
https://mbconnectline.com/security-advice/
Third Party Advisory x_refsource_misc
https://cert.vde.com/de-de/advisories/vde-2021-003

Scores

CVSS v3 4.3
EPSS 0.0078
EPSS Percentile 51.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Details

CWE
CWE-400
Status published
Products (2)
mbconnectline/mbconnect24 < 2.6.2
mbconnectline/mymbconnect24 < 2.6.2
Published Feb 16, 2021
Tracked Since Feb 18, 2026