CVE-2020-35564

HIGH

MB CONNECT LINE mbconnect24 and mymbconnect24 < 2.6.2 - Remote Code Execution via Outdated Component

Title source: llm
STIX 2.1

Description

An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an outdated and unused component allowing for malicious user input of active code.

References (2)

Core 2
Core References
Vendor Advisory x_refsource_misc
https://mbconnectline.com/security-advice/
Third Party Advisory x_refsource_misc
https://cert.vde.com/de-de/advisories/vde-2021-003

Scores

CVSS v3 7.5
EPSS 0.0089
EPSS Percentile 55.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Details

CWE
CWE-74
Status published
Products (2)
mbconnectline/mbconnect24 < 2.6.2
mbconnectline/mymbconnect24 < 2.6.2
Published Feb 16, 2021
Tracked Since Feb 18, 2026