CVE-2023-1779mediumCWE-863

CVE-2023-1779: fallo de gravedad media en mbCONNECT24

Helmholz and MB Connect Line: Account takeover via password reset in multiple products

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear mbCONNECT24+ Monitorear mymbCONNECT24

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 4.3epss 0.5%
Exposure of Sensitive Information to an unauthorized actor vulnerability in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual in versions <=2.13.3 allow an authorized remote attacker with low privileges to view a limited amount of another accounts contact information.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Productos afectados
Helmholz · myREX24Helmholz · myREX24.virtualMB Connect Line · mbCONNECT24MB Connect Line · mymbCONNECT24
CVEs relacionadas — mbCONNECT24

En el mismo producto, de las más peligrosas a las menos.

CVE-2020-12527MEDIUMImproper Access Validation in products of MB connect line and HelmholzEPSS 1.0%CVE-2022-22520MEDIUMUser enumeration vulnerability in MB connect line and Helmholz productsEPSS 1.0%CVE-2023-0985HIGHHelmholz and MB Connect Line: Account takeover via password reset in multiple productsEPSS 0.8%CVE-2021-34574MEDIUMPassword policy evasion in products of MB connect line and HelmholzEPSS 0.7%CVE-2024-45272HIGHMB connect line/Helmholz: Generation of weak passwords vulnerabilityEPSS 0.6%CVE-2025-3092HIGHMB connect line: Observable response discrepancy in mbCONNECT24/mymbCONNECT24EPSS 0.5%