CVE-2020-35561

MEDIUM

mbconnect24, mymbconnect24, myrex24, and myrex24.virtual < 2.11.2 - SSRF in HA Module

Title source: llm
STIX 2.1

Description

An issue was discovered MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. There is an SSRF in the HA module allowing an unauthenticated attacker to scan for open ports.

References (3)

Core 3
Core References
Vendor Advisory x_refsource_misc
https://mbconnectline.com/security-advice/
Third Party Advisory x_refsource_confirm
https://cert.vde.com/en/advisories/VDE-2021-003
Third Party Advisory x_refsource_confirm
https://cert.vde.com/en/advisories/VDE-2022-039

Scores

CVSS v3 5.3
EPSS 0.0119
EPSS Percentile 64.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-918
Status published
Products (4)
helmholz/myrex24 < 2.11.2
helmholz/myrex24.virtual < 2.11.2
mbconnectline/mbconnect24 < 2.11.2
mbconnectline/mymbconnect24 < 2.11.2
Published Feb 16, 2021
Tracked Since Feb 18, 2026