CVE-2020-12527CWE-269

Improper Access Validation in products of MB connect line and Helmholz

Medium · published March 2, 2021

CVSS v3.1
6.5
EPSS
1%
Percentile
63.0
In the wild
Unconfirmed
What it is

An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. Improper access validation allows a logged in user to shutdown or reboot devices in his account without having corresponding permissions.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01015 · 63.0th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2021-03-02T21:15Z
EPSS history
Timeline
  • 02 MAR 21:15Z
    Improper Access Validation in products of MB connect line and Helmholz
    cvelistv5