CVE-2020-35557

—

CVSS 3.1

6.5 medium

EPSS

1%p61

Published

Feb 16, 2021 (Feb 16, 2021)

Modified

Jun 17, 2026

Description

An issue in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 allows a logged in user to see devices in the account he should not have access to due to improper use of access validation.

Vendors: mbconnectline helmholz
Products: mbconnect24, mymbconnect24, myrex24, myrex24.virtual
Weakness: CWE-269
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.