CVE-2020-35566

—

CVSS 3.1

5.3 medium

EPSS

1%p67

Published

Feb 16, 2021 (Feb 16, 2021)

Modified

Jun 17, 2026

Description

An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. An attacker can read arbitrary JSON files via Local File Inclusion.

Vendors: mbconnectline helmholz
Products: mbconnect24, mymbconnect24, myrex24, myrex24.virtual
Weakness: CWE-706
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.