CVE-2020-35566 - Local file inclusion vulnerability in products of MB connect line and Helmholz

Back Back to CVE browser

MEDIUM

Local file inclusion vulnerability in products of MB connect line and Helmholz

Published Feb 16, 2021

5.3

MEDIUM

CVSS 3.1

EPSS 1.24%

Description

An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. An attacker can read arbitrary JSON files via Local File Inclusion.

Affected products

Remediation

Vendor solution

Update to v2.12.1

Weaknesses (1)

CWE-706

References (4)

https://cert.vde.com/en/advisories/VDE-2021-003
x_refsource_CONFIRMThird Party Advisory
https://cert.vde.com/en/advisories/VDE-2022-039
x_refsource_CONFIRMThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-23233
Advisory
https://mbconnectline.com/security-advice/
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://cert.vde.com/en/advisories/VDE-2021-003		x_refsource_CONFIRMThird Party Advisory
https://cert.vde.com/en/advisories/VDE-2022-039		x_refsource_CONFIRMThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-23233		Advisory
https://mbconnectline.com/security-advice/		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Feb 16, 2021

Updated Sep 16, 2024

Reserved Dec 18, 2020

Link CVE-2020-35566

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-35566

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Feb 16, 2021

Updated Sep 16, 2024

Link EUVD-2020-23233

GitHub

No data