# Recent vulnerabilities from MB connect line GmbH

## [vde-2026-044](https://vulnerability.circl.lu/vuln/vde-2026-044)

```json
{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      }
    ],
    "aggregate_severity": {
      "namespace": "https://www.first.org/cvss/v3.1/specification-document#Qualitative-Severity-Rating-Scale",
      "text": "High"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "text": "Multiple vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24.",
        "title": "Summary"
      },
      {
        "category": "description",
        "text": "CVE-2026-14448 allows an highly authenticated attacker for to run arbitrary system commands in mbCONNECT24/mymbCONNECT24 resulting in a total loss of confidentiality, availability and integrity.\n\nAll remaining vulnerabilities allow for SQLi in mbCONNECT24/mymbCONNECT24 resulting in varying access to the database.\n\nFor specific details, see CVE description.\n\n",
        "title": "Impact"
      },
      {
        "category": "description",
        "text": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.\n",
        "title": "Remediation"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "security-team@mbconnectline.de",
      "name": "MB connect line GmbH",
      "namespace": "https://mbconnectline.com"
    },
    "references": [
      {
        "category": "external",
        "summary": "Product security incident reports",
        "url": "https://mbconnectline.com/security-advice"
      },
      {
        "category": "self",
        "summary": "Security Incident Management SIM#2026-01-1 - PDF",
        "url": "https://advisories.mbconnectline.com/pdf/SIM2026-01-1.pdf"
      },
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for MB connect line",
        "url": "https://certvde.com/en/advisories/vendor/mbconnectline"
      },
      {
        "category": "self",
        "summary": "VDE-2026-044: MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24 - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2026-044"
      },
      {
        "category": "self",
        "summary": "VDE-2026-044: MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24 - CSAF",
        "url": "https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-044.json"
      }
    ],
    "title": "MB connect line: Multiple SQLi vulnerabilities in mbCONNECT24/mymbCONNECT24",
    "tracking": {
      "aliases": [
        "VDE-2026-044",
        "SIM#2026-01-1"
      ],
      "current_release_date": "2026-07-20T13:30:00.000Z",
      "generator": {
        "date": "2026-07-20T13:30:00.000Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.44-1-gc13b05bd"
        }
      },
      "id": "VDE-2026-044",
      "initial_release_date": "2026-05-27T11:00:00.000Z",
      "revision_history": [
        {
          "date": "2026-05-27T11:00:00.000Z",
          "number": "1.0.0",
          "summary": "Initial revision."
        },
        {
          "date": "2026-07-20T13:30:00.000Z",
          "number": "2.0.0",
          "summary": "Added missing CVE-2026-14448, Revised Summary and Impact accordingly, starting version"
        }
      ],
      "status": "final",
      "version": "2.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_family",
                "name": "mbCONNECT24",
                "product": {
                  "name": "MB connect line mbCONNECT24",
                  "product_id": "CSAFPID-11001",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:h:mb_connect_line:mbCONNECT24:*:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "mymbCONNECT24",
                "product": {
                  "name": "MB connect line mymbCONNECT24",
                  "product_id": "CSAFPID-11002",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:h:mb_connect_line:mymbCONNECT24:*:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Hardware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:semver/>=1.0.0|<=2.20.0",
                "product": {
                  "name": "Firmware <=2.20.0",
                  "product_id": "CSAFPID-21001"
                }
              },
              {
                "category": "product_version",
                "name": "2.20.1",
                "product": {
                  "name": "Firmware 2.20.1",
                  "product_id": "CSAFPID-21002",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:mb_connect_line:mbconnect24_firmware:2.20.1:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "2.20.0",
                "product": {
                  "name": "Firmware 2.20.0",
                  "product_id": "CSAFPID-21003",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:mb_connect_line:mbconnect24_firmware:2.20.0:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Firmware"
          }
        ],
        "category": "vendor",
        "name": "MB connect line"
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "product_ids": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ],
        "summary": "Affected products."
      },
      {
        "group_id": "CSAFGID-0002",
        "product_ids": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "summary": "Fixed products."
      }
    ],
    "relationships": [
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=2.20.0 installed on MB connect line mbCONNECT24",
          "product_id": "CSAFPID-31001"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=2.20.0 installed on MB connect line mymbCONNECT24",
          "product_id": "CSAFPID-31002"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.20.0 installed on MB connect line mbCONNECT24",
          "product_id": "CSAFPID-31003",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:mb_connect_line:mbconnect24:2.20.0:*:*:*:*:*:*:*"
          }
        },
        "product_reference": "CSAFPID-21003",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.20.0 installed on MB connect line mymbCONNECT24",
          "product_id": "CSAFPID-31004",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:mb_connect_line:mymbconnect24:2.20.0:*:*:*:*:*:*:*"
          }
        },
        "product_reference": "CSAFPID-21003",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.20.1 installed on MB connect line mbCONNECT24",
          "product_id": "CSAFPID-31005",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:mb_connect_line:mbconnect24:2.20.1:*:*:*:*:*:*:*"
          }
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.20.1 installed on MB connect line mymbCONNECT24",
          "product_id": "CSAFPID-31006",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:mb_connect_line:mymbconnect24:2.20.1:*:*:*:*:*:*:*"
          }
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11002"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-40810",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the userinfo endpoint due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 8.7 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.5,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 7.5,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Unauthenticated SQLi in userinfo Endpoint"
    },
    {
      "cve": "CVE-2026-40811",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the ssoabstractservice due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 8.7 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.5,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 7.5,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Unauthenticated SQLi in ssoabstractservice"
    },
    {
      "cve": "CVE-2026-40812",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getLiveValues functions sn parameter due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 8.7 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.5,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 7.5,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Unauthenticated SQLi in getLiveValues function"
    },
    {
      "cve": "CVE-2026-40813",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getLiveValues functions tagid parameter due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 8.7 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.5,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 7.5,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Unauthenticated SQLi in getLiveValues"
    },
    {
      "cve": "CVE-2026-40814",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dataapi.php files _mb24confi_getTagAlarm function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 8.7 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.5,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 7.5,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Unauthenticated SQLi in _mb24confi_getTagAlarm function"
    },
    {
      "cve": "CVE-2026-40815",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the _mb24api_getUserAccount function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 8.7 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.5,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 7.5,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Unauthenticated SQLi in _mb24api_getUserAccount function"
    },
    {
      "cve": "CVE-2026-40816",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the mb24alarm.php files _mb24confi_getTagAlarm function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 8.7 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.5,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 7.5,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Unauthenticated SQLi in _mb24confi_getTagAlarm function"
    },
    {
      "cve": "CVE-2026-40817",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAlarmProfiles function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 8.7 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.5,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 7.5,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Unauthenticated SQLi in getAlarmProfiles function"
    },
    {
      "cve": "CVE-2026-40818",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the _mb24confi_getDevice function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 8.7 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.5,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 7.5,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Unauthenticated SQLi in _mb24confi_getDevice function function"
    },
    {
      "cve": "CVE-2026-40819",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the sync_data24 task due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 8.7 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.5,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 7.5,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Unauthenticated SQLi in sync_data24 task"
    },
    {
      "cve": "CVE-2026-40820",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getVpnData function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 6.9 / Medium",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 4.9,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "temporalScore": 4.9,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated SQLi in getVpnData function"
    },
    {
      "cve": "CVE-2026-40821",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAccountByID function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 6.9 / Medium",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 4.9,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "temporalScore": 4.9,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated SQLi in getAccountByID function"
    },
    {
      "cve": "CVE-2026-40822",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the DevSerialReset function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 6.9 / Medium",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 4.9,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "temporalScore": 4.9,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated SQLi in DevSerialReset function"
    },
    {
      "cve": "CVE-2026-40823",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the DevSerialReset function due to improper neutralization of special elements in a SQL UPDATE command allowing for reading the whole database and changing values in a non critical table. This can result in a total loss of confidentiality and some loss of integrity.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N - 7 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 5.5,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "temporalScore": 5.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated SQLi in DevSerialReset function"
    },
    {
      "cve": "CVE-2026-40824",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the accountstatus view userid parameter due to improper neutralization of special elements in a SQL UPDATE command allowing for reading the whole database and changing values in a non critical table. This can result in a total loss of confidentiality and some loss of integrity.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N - 7 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 5.5,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "temporalScore": 5.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated SQLi in accountstatus view"
    },
    {
      "cve": "CVE-2026-40825",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the accountstatus view devices parameter due to improper neutralization of special elements in a SQL UPDATE command allowing for reading the whole database and changing values in a non critical table. This can result in a total loss of confidentiality and some loss of integrity.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N - 7 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 5.5,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "temporalScore": 5.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated SQLi in accountstatus view"
    },
    {
      "cve": "CVE-2026-40826",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dsgvo_contracts view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 6.9 / Medium",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 4.9,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "temporalScore": 4.9,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated SQLi in dsgvo_contracts view"
    },
    {
      "cve": "CVE-2026-40827",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the _RemoveRequest function due to improper neutralization of special elements in a SQL DELETE command allowing for reading the whole database and deleting entries in a non critical table. This can result in a total loss of confidentiality and some loss of integrity.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N - 7 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 5.5,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "temporalScore": 5.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated SQLi in _RemoveRequest function"
    },
    {
      "cve": "CVE-2026-40828",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the DeleteSysLogEntry function due to improper neutralization of special elements in a SQL DELETE command allowing for reading the whole database and deleting entries in a non critical table. This can result in a total loss of confidentiality and some loss of integrity.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N - 7 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 5.5,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "temporalScore": 5.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated SQLi in DeleteSysLogEntry function"
    },
    {
      "cve": "CVE-2026-40829",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the view.html.php files UpdateParam function due to improper neutralization of special elements in a SQL UPDATE command allowing for reading the whole database and changing values in a non critical table. This can result in a total loss of confidentiality and some loss of integrity.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N - 7 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 5.5,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "temporalScore": 5.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated SQLi in UpdateParam function"
    },
    {
      "cve": "CVE-2026-40830",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the admin.mbnetj.php files UpdateParam function due to improper neutralization of special elements in a SQL UPDATE command allowing for reading the whole database and changing values in a non critical table. This can result in a total loss of confidentiality and some loss of integrity.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N - 7 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 5.5,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "temporalScore": 5.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated SQLi in UpdateParam function"
    },
    {
      "cve": "CVE-2026-40831",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the Easy View due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 7.1 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 6.5,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 6.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated SQLi in Easy View"
    },
    {
      "cve": "CVE-2026-40832",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getDevicegroups function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 7.1 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 6.5,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 6.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated SQLi in getDevicegroups function"
    },
    {
      "cve": "CVE-2026-40833",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dash.php files saveDashboardLayout function due to improper neutralization of special elements in a SQL INSERT command allowing for reading the whole database and inserting entries into a non critical table. This can result in a total loss of confidentiality and some loss of integrity.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N - 7.1 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.1,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 7.1,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated SQLi in saveDashboardLayout function"
    },
    {
      "cve": "CVE-2026-40834",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dash_layout.php files saveDashboardLayout function due to improper neutralization of special elements in a SQL INSERT command allowing for reading the whole database and inserting entries into a non critical table. This can result in a total loss of confidentiality and some loss of integrity.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N - 7.1 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.1,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 7.1,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated SQLi in saveDashboardLayout function"
    },
    {
      "cve": "CVE-2026-40835",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the saveObjectFromData function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 7.1 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 6.5,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 6.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated SQLi in saveObjectFromData function"
    },
    {
      "cve": "CVE-2026-40836",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the inmessage model due to improper neutralization of special elements in a SQL DELETE command allowing for reading the whole database and deleting entries in a non critical table. This can result in a total loss of confidentiality and some loss of integrity.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N - 7.1 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.1,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 7.1,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated SQLi in inmessage model"
    },
    {
      "cve": "CVE-2026-40837",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getProjectScalings function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 7.1 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 6.5,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 6.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated SQLi in getProjectScalings function"
    },
    {
      "cve": "CVE-2026-40838",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getDeviceScalings function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 7.1 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 6.5,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 6.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated SQLi in getDeviceScalings function"
    },
    {
      "cve": "CVE-2026-40839",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getComponentScalings function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 7.1 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 6.5,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 6.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated SQLi in getComponentScalings function"
    },
    {
      "cve": "CVE-2026-40840",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the VerifyCreateLicences function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 7.1 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 6.5,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 6.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated SQLi in VerifyCreateLicences function"
    },
    {
      "cve": "CVE-2026-40841",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getProjectTags function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 7.1 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 6.5,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 6.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated SQLi in getProjectTags function"
    },
    {
      "cve": "CVE-2026-40842",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getWidgetTags function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 7.1 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 6.5,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 6.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated SQLi in getWidgetTags function"
    },
    {
      "cve": "CVE-2026-40843",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the alarming view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 7.1 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 6.5,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 6.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated SQLi in alarming view"
    },
    {
      "cve": "CVE-2026-40844",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the dashboard view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 7.1 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 6.5,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 6.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated SQLi in dashboard view"
    },
    {
      "cve": "CVE-2026-40845",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the devices_configuration view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 7.1 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 6.5,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 6.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated SQLi in devices_configuration view"
    },
    {
      "cve": "CVE-2026-40846",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the system view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 7.1 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 6.5,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 6.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated SQLi in system view"
    },
    {
      "cve": "CVE-2026-40847",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the system_tag view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 7.1 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 6.5,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 6.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated SQLi in system_tag view"
    },
    {
      "cve": "CVE-2026-40848",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the tag view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 7.1 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 6.5,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 6.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated SQLi in tag view"
    },
    {
      "cve": "CVE-2026-40849",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An low privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the user_alarmprofile view due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 7.1 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 6.5,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 6.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated SQLi in user_alarmprofile view"
    },
    {
      "cve": "CVE-2026-40850",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getAccountData function due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N - 8.7 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        },
        {
          "category": "mitigation",
          "details": "This function is not enabled by default and can only be enabled if an attacker already has a root shell on the system.\n\nThis function is only enabled on MBCL hosted instances behind the Gatekeeper service. On these instances access to this function is restricted by an IP whitelist on the LAN interface.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.5,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 7.5,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Unauthenticated SQLi in getAccountData function"
    },
    {
      "cve": "CVE-2026-14448",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An high privileged remote attacker can exploit an authenticated OS command injection vulnerability in the system_certificates view due to improper neutralization of special elements in an OS command. This can result in a total loss of confidentiality, availability and integrity.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - 8.6 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.1.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.2,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "temporalScore": 7.2,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated RCE in system_certificates view"
    }
  ]
}
```

## [vde-2026-068](https://vulnerability.circl.lu/vuln/vde-2026-068)

```json
{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      }
    ],
    "aggregate_severity": {
      "namespace": "https://www.first.org/cvss/v3.1/specification-document#Qualitative-Severity-Rating-Scale",
      "text": "High"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "text": "There is a vulnerability in mbCONNECT24/mymbCONNECT24 that allows an authenticated remote attacker to access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters.",
        "title": "Summary"
      },
      {
        "category": "description",
        "text": "CVE-2026-10521 allows an authenticated remote attacker to modify critical program parameters. This can result in a total loss of confidentiality, integrity and availability.",
        "title": "Impact"
      },
      {
        "category": "description",
        "text": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.2.\n",
        "title": "Remediation"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "security-team@mbconnectline.de",
      "name": "MB connect line GmbH",
      "namespace": "https://mbconnectline.com"
    },
    "references": [
      {
        "category": "external",
        "summary": "Product security incident reports",
        "url": "https://mbconnectline.com/security-advice"
      },
      {
        "category": "self",
        "summary": "Security Incident Management SIM#2026-04 - PDF",
        "url": "https://advisories.mbconnectline.com/pdf/SIM2026-04.pdf"
      },
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for MB connect line",
        "url": "https://certvde.com/en/advisories/vendor/mbconnectline"
      },
      {
        "category": "self",
        "summary": "VDE-2026-068: MB connect line: Authenticated unintended access to critical program parameters in mbCONNECT24/mymbCONNECT24 - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2026-068"
      },
      {
        "category": "self",
        "summary": "VDE-2026-068: MB connect line: Authenticated unintended access to critical program parameters in mbCONNECT24/mymbCONNECT24 - CSAF",
        "url": "https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-068.json"
      }
    ],
    "title": "MB connect line: Authenticated unintended access to critical program parameters in mbCONNECT24/mymbCONNECT24",
    "tracking": {
      "aliases": [
        "VDE-2026-068",
        "SIM#2026-04"
      ],
      "current_release_date": "2026-06-23T11:00:00.000Z",
      "generator": {
        "date": "2026-06-18T09:38:03.021Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.44"
        }
      },
      "id": "VDE-2026-068",
      "initial_release_date": "2026-06-23T11:00:00.000Z",
      "revision_history": [
        {
          "date": "2026-06-23T11:00:00.000Z",
          "number": "1.0.0",
          "summary": "Initial revision."
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_family",
                "name": "mbCONNECT24",
                "product": {
                  "name": "MB connect line mbCONNECT24",
                  "product_id": "CSAFPID-11001",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:h:mb_connect_line:mbCONNECT24:*:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "mymbCONNECT24",
                "product": {
                  "name": "MB connect line mymbCONNECT24",
                  "product_id": "CSAFPID-11002",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:h:mb_connect_line:mymbCONNECT24:*:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Hardware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:semver/<2.20.2",
                "product": {
                  "name": "Firmware <2.20.2",
                  "product_id": "CSAFPID-21001"
                }
              },
              {
                "category": "product_version",
                "name": "2.20.2",
                "product": {
                  "name": "Firmware 2.20.2",
                  "product_id": "CSAFPID-21002",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:mb_connect_line:mbconnect24_firmware:2.20.2:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "2.20.1",
                "product": {
                  "name": "Firmware 2.20.1",
                  "product_id": "CSAFPID-21003",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:mb_connect_line:mbconnect24_firmware:2.20.1:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Firmware"
          }
        ],
        "category": "vendor",
        "name": "MB connect line"
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "product_ids": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ],
        "summary": "Affected products."
      },
      {
        "group_id": "CSAFGID-0002",
        "product_ids": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "summary": "Fixed products."
      }
    ],
    "relationships": [
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <2.20.2 installed on MB connect line mbCONNECT24",
          "product_id": "CSAFPID-31001"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <2.20.2 installed on MB connect line mymbCONNECT24",
          "product_id": "CSAFPID-31002"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.20.1 installed on MB connect line mbCONNECT24",
          "product_id": "CSAFPID-31003",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:mb_connect_line:mbconnect24:2.20.1:*:*:*:*:*:*:*"
          }
        },
        "product_reference": "CSAFPID-21003",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.20.1 installed on MB connect line mymbCONNECT24",
          "product_id": "CSAFPID-31004",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:mb_connect_line:mymbconnect24:2.20.1:*:*:*:*:*:*:*"
          }
        },
        "product_reference": "CSAFPID-21003",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.20.2 installed on MB connect line mbCONNECT24",
          "product_id": "CSAFPID-31005",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:mb_connect_line:mbconnect24:2.20.2:*:*:*:*:*:*:*"
          }
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.20.2 installed on MB connect line mymbCONNECT24",
          "product_id": "CSAFPID-31006",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:mb_connect_line:mymbconnect24:2.20.2:*:*:*:*:*:*:*"
          }
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11002"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-10521",
      "cwe": {
        "id": "CWE-425",
        "name": "Direct Request ('Forced Browsing')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An high privileged remote attacker can access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters. This can result in a total loss of confidentiality, integrity and availability.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - 8.6 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.20.2.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.2,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "temporalScore": 7.2,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Authenticated unintended access to critical program parameters"
    }
  ]
}
```

## [vde-2026-054](https://vulnerability.circl.lu/vuln/vde-2026-054)

```json
{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      },
      {
        "names": [
          "Moritz Abrell",
          "Christian Zäske"
        ],
        "organization": "SySS GmbH",
        "summary": "reporting",
        "urls": [
          "https://www.syss.de"
        ]
      }
    ],
    "aggregate_severity": {
      "namespace": "https://www.first.org/cvss/v3.1/specification-document#Qualitative-Severity-Rating-Scale",
      "text": "High"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "text": "Two command injection vulnerabilities have been discovered in MB connect line mbNET/mbNET.rokey/mbNET.mini.",
        "title": "Summary"
      },
      {
        "category": "description",
        "text": "The vulnerabilities allow for command injection in mbNET/mbNET.rokey/mbNET.mini with varying prerequisites resulting in full system compromise.\n\n",
        "title": "Impact"
      },
      {
        "category": "description",
        "text": "Update:\n\n- mbNET/mbNET.rokey: 8.4.5\n- mbNET.mini: 3.0.3",
        "title": "Remediation"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "security-team@mbconnectline.de",
      "name": "MB connect line GmbH",
      "namespace": "https://mbconnectline.com"
    },
    "references": [
      {
        "category": "external",
        "summary": "Product security incident reports",
        "url": "https://mbconnectline.com/security-advice"
      },
      {
        "category": "self",
        "summary": "Security Incident Management SIM#2026-01-2 - PDF",
        "url": "https://advisories.mbconnectline.com/pdf/SIM2026-01-2.pdf"
      },
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for MB connect line",
        "url": "https://certvde.com/en/advisories/vendor/mbconnectline"
      },
      {
        "category": "self",
        "summary": "VDE-2026-054: MB connect line: Multiple vulnerabilities in mbNET/mbNET.rokey/mbNET.mini - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2026-054"
      },
      {
        "category": "self",
        "summary": "VDE-2026-054: MB connect line: Multiple vulnerabilities in mbNET/mbNET.rokey/mbNET.mini - CSAF",
        "url": "https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-054.json"
      }
    ],
    "title": "MB connect line: Multiple vulnerabilities in mbNET/mbNET.rokey/mbNET.mini",
    "tracking": {
      "aliases": [
        "VDE-2026-054",
        "SIM#2026-01-2"
      ],
      "current_release_date": "2026-05-27T11:00:00.000Z",
      "generator": {
        "date": "2026-05-27T11:00:00.000Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.44"
        }
      },
      "id": "VDE-2026-054",
      "initial_release_date": "2026-05-27T11:00:00.000Z",
      "revision_history": [
        {
          "date": "2026-05-27T11:00:00.000Z",
          "number": "1.0.0",
          "summary": "Initial revision."
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "mbNET/mbNET.rokey",
                "product": {
                  "name": "MB connect line mbNET",
                  "product_id": "CSAFPID-11003",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:h:mb_connect_line:mbNET:*:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "mbNET.mini",
                "product": {
                  "name": "MB connect line mbNET.mini",
                  "product_id": "CSAFPID-11004",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:h:mb_connect_line:mbNET.mini:*:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Hardware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:semver/<=8.4.4",
                "product": {
                  "name": "Firmware <=8.4.4",
                  "product_id": "CSAFPID-21004"
                }
              },
              {
                "category": "product_version",
                "name": "8.4.5",
                "product": {
                  "name": "Firmware 8.4.5",
                  "product_id": "CSAFPID-21005",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:mb_connect_line:mbNET_firmware:8.4.5:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "8.4.4",
                "product": {
                  "name": "Firmware 8.4.4",
                  "product_id": "CSAFPID-21006",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:mb_connect_line:mbNET_firmware:8.4.4:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:semver/<=3.0.2",
                "product": {
                  "name": "Firmware <=3.0.2",
                  "product_id": "CSAFPID-21007"
                }
              },
              {
                "category": "product_version",
                "name": "3.0.3",
                "product": {
                  "name": "Firmware 3.0.3",
                  "product_id": "CSAFPID-21008",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:mb_connect_line:mbNET.mini_firmware:3.0.3:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "3.0.2",
                "product": {
                  "name": "Firmware 3.0.2",
                  "product_id": "CSAFPID-21009",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:mb_connect_line:mbNET.mini_firmware:3.0.2:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Firmware"
          }
        ],
        "category": "vendor",
        "name": "MB connect line"
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "product_ids": [
          "CSAFPID-31007",
          "CSAFPID-31008",
          "CSAFPID-31009",
          "CSAFPID-31010"
        ],
        "summary": "Affected products."
      },
      {
        "group_id": "CSAFGID-0002",
        "product_ids": [
          "CSAFPID-31011",
          "CSAFPID-31012"
        ],
        "summary": "Fixed products."
      }
    ],
    "relationships": [
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=8.4.4 installed on MB connect line mbNET/mbNET.rokey",
          "product_id": "CSAFPID-31007"
        },
        "product_reference": "CSAFPID-21004",
        "relates_to_product_reference": "CSAFPID-11003"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=3.0.2 installed on MB connect line mbNET.mini",
          "product_id": "CSAFPID-31008"
        },
        "product_reference": "CSAFPID-21007",
        "relates_to_product_reference": "CSAFPID-11004"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 8.4.4 installed on MB connect line mbNET/mbNET.rokey",
          "product_id": "CSAFPID-31009",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:mb_connect_line:mbNET:8.4.4:*:*:*:*:*:*:*"
          }
        },
        "product_reference": "CSAFPID-21006",
        "relates_to_product_reference": "CSAFPID-11003"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 3.0.2 installed on MB connect line mbNET.mini",
          "product_id": "CSAFPID-31010",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:mb_connect_line:mbNET.mini:3.0.2:*:*:*:*:*:*:*"
          }
        },
        "product_reference": "CSAFPID-21009",
        "relates_to_product_reference": "CSAFPID-11004"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 8.4.5 installed on MB connect line mbNET/mbNET.rokey",
          "product_id": "CSAFPID-31011",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:mb_connect_line:mbNET:8.4.5:*:*:*:*:*:*:*"
          }
        },
        "product_reference": "CSAFPID-21005",
        "relates_to_product_reference": "CSAFPID-11003"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 3.0.3 installed on MB connect line mbNET.mini",
          "product_id": "CSAFPID-31012",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:mb_connect_line:mbNET.mini:3.0.3:*:*:*:*:*:*:*"
          }
        },
        "product_reference": "CSAFPID-21008",
        "relates_to_product_reference": "CSAFPID-11004"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-40851",
      "cwe": {
        "id": "CWE-1287",
        "name": "Improper Validation of Specified Type of Input"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "A low privileged local attacker can perform a confusion attack on the cfgparser via a specially crafted file on an USB stick leading to code execution. This can result in a total loss of confidentiality, integrity and availability.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31011",
          "CSAFPID-31012"
        ],
        "known_affected": [
          "CSAFPID-31007",
          "CSAFPID-31008",
          "CSAFPID-31009",
          "CSAFPID-31010"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - 8.5 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update:\n\n- mbNET/mbNET.rokey: 8.4.5\n- mbNET.mini: 3.0.3",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 8.4,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 8.4,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31007",
            "CSAFPID-31008",
            "CSAFPID-31009",
            "CSAFPID-31010"
          ]
        }
      ],
      "title": "Command injection via USB"
    },
    {
      "cve": "CVE-2026-40852",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "A high privileged attacker can alter the config generator injecting a payload into future created configurations. The device is not correctly checking this configuration value before passing it to an system execute leading to code execution. This can result in a total loss of confidentiality, integrity and availability.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31011",
          "CSAFPID-31012"
        ],
        "known_affected": [
          "CSAFPID-31007",
          "CSAFPID-31008",
          "CSAFPID-31009",
          "CSAFPID-31010"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - 8.6 / High",
          "url": "https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update:\n\n- mbNET/mbNET.rokey: 8.4.5\n- mbNET.mini: 3.0.3",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.2,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "temporalScore": 7.2,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31007",
            "CSAFPID-31008",
            "CSAFPID-31009",
            "CSAFPID-31010"
          ]
        }
      ],
      "title": "Command injection via malicious configuration"
    }
  ]
}
```

## [vde-2026-030](https://vulnerability.circl.lu/vuln/vde-2026-030)

```json
{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      },
      {
        "names": [
          "Moritz Abrell",
          "Christian Zäske"
        ],
        "organization": "SySS GmbH",
        "summary": "reporting",
        "urls": [
          "https://www.syss.de"
        ]
      }
    ],
    "aggregate_severity": {
      "namespace": "https://www.first.org/cvss/v3.1/specification-document#Qualitative-Severity-Rating-Scale",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "text": "Multiple vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24 that could allow RCE, SQLi or information leakage.",
        "title": "Summary"
      },
      {
        "category": "description",
        "text": "CVE-2026-33613 allows RCE resulting in full system compromise impacting confidentiality, integrity, and availability. CVE-2026-33614 and CVE-2026-33616 allow unauthenticated SQLi resulting in arbitrary read access to the complete database, while CVE-2026-33615 results in arbitrary write access to the user table. Lastly CVE-2026-33617 allows unauthenticated access to some sensitive data.",
        "title": "Impact"
      },
      {
        "category": "description",
        "text": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.19.5.",
        "title": "Remediation"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "security-team@mbconnectline.de",
      "name": "MB connect line GmbH",
      "namespace": "https://mbconnectline.com"
    },
    "references": [
      {
        "category": "external",
        "summary": "Product security incident reports",
        "url": "https://mbconnectline.com/security-advice"
      },
      {
        "category": "self",
        "summary": "Security Incident Management SIM#2026-03 - PDF",
        "url": "https://advisories.mbconnectline.com/pdf/SIM2026-03.pdf"
      },
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for MB connect line",
        "url": "https://certvde.com/en/advisories/vendor/mbconnectline"
      },
      {
        "category": "self",
        "summary": "VDE-2026-030: MB connect line: Multiple Vulnerabilities in mbCONNECT24/mymbCONNECT24 - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2026-030"
      },
      {
        "category": "self",
        "summary": "VDE-2026-030: MB connect line: Multiple Vulnerabilities in mbCONNECT24/mymbCONNECT24 - CSAF",
        "url": "https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-030.json"
      }
    ],
    "title": "MB connect line: Multiple Vulnerabilities in mbCONNECT24/mymbCONNECT24",
    "tracking": {
      "aliases": [
        "VDE-2026-030",
        "SIM#2026-03"
      ],
      "current_release_date": "2026-04-02T11:00:00.000Z",
      "generator": {
        "date": "2026-03-30T06:13:11.100Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.44-1-gc13b05bd"
        }
      },
      "id": "VDE-2026-030",
      "initial_release_date": "2026-04-02T11:00:00.000Z",
      "revision_history": [
        {
          "date": "2026-04-02T11:00:00.000Z",
          "number": "1.0.0",
          "summary": "Initial revision."
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_family",
                "name": "mbCONNECT24",
                "product": {
                  "name": "MB connect line mbCONNECT24",
                  "product_id": "CSAFPID-11001",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:h:mb_connect_line:mbCONNECT24:*:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "mymbCONNECT24",
                "product": {
                  "name": "MB connect line mymbCONNECT24",
                  "product_id": "CSAFPID-11002",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:h:mb_connect_line:mymbCONNECT24:*:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Hardware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:semver/<=2.19.4",
                "product": {
                  "name": "Firmware <=2.19.4",
                  "product_id": "CSAFPID-21001"
                }
              },
              {
                "category": "product_version",
                "name": "2.19.5",
                "product": {
                  "name": "Firmware 2.19.5",
                  "product_id": "CSAFPID-21002",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:mb_connect_line:mbconnect24_firmware:2.19.4:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "2.19.4",
                "product": {
                  "name": "Firmware 2.19.4",
                  "product_id": "CSAFPID-21003",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:mb_connect_line:mbconnect24_firmware:2.19.3:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Firmware"
          }
        ],
        "category": "vendor",
        "name": "MB connect line"
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "product_ids": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ],
        "summary": "Affected products."
      },
      {
        "group_id": "CSAFGID-0002",
        "product_ids": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "summary": "Fixed products."
      }
    ],
    "relationships": [
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=2.19.4 installed on MB connect line mbCONNECT24",
          "product_id": "CSAFPID-31001"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=2.19.4 installed on MB connect line mymbCONNECT24",
          "product_id": "CSAFPID-31002"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.19.4 installed on MB connect line mbCONNECT24",
          "product_id": "CSAFPID-31003",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:mb_connect_line:mbconnect24:2.19.4:*:*:*:*:*:*:*"
          }
        },
        "product_reference": "CSAFPID-21003",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.19.4 installed on MB connect line mymbCONNECT24",
          "product_id": "CSAFPID-31004",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:mb_connect_line:mymbconnect24:2.19.4:*:*:*:*:*:*:*"
          }
        },
        "product_reference": "CSAFPID-21003",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.19.5 installed on MB connect line mbCONNECT24",
          "product_id": "CSAFPID-31005",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:mb_connect_line:mbconnect24:2.19.5:*:*:*:*:*:*:*"
          }
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.19.5 installed on MB connect line mymbCONNECT24",
          "product_id": "CSAFPID-31006",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:mb_connect_line:mymbconnect24:2.19.5:*:*:*:*:*:*:*"
          }
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11002"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-33613",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "Due to the improper neutralisation of special elements used in an OS command, a remote attacker can exploit an RCE vulnerability in the generateSrpArray function, resulting in full system compromise.\n\nThis vulnerability can only be attacked if the attacker has some other way to write arbitrary data to the user table.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.19.4.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.2,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "temporalScore": 7.2,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "RCE in generateSrpArray"
    },
    {
      "cve": "CVE-2026-33614",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getinfo endpoint due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.19.5.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.5,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 7.5,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Unauthenticated SQLi in getinfo Endpoint"
    },
    {
      "cve": "CVE-2026-33615",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the setinfo endpoint due to improper neutralization of special elements in a SQL UPDATE command. This can result in a total loss of integrity and availability.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.19.5.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "NONE",
            "environmentalScore": 9.1,
            "environmentalSeverity": "CRITICAL",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 9.1,
            "temporalSeverity": "CRITICAL",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Unauthenticated SQLi in setinfo Endpoint"
    },
    {
      "cve": "CVE-2026-33616",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An unauthenticated remote attacker can exploit an unauthenticated blind SQL Injection vulnerability in the mb24api endpoint due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.19.5.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.5,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 7.5,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Unauthenticated SQLi in mb24api Endpoint"
    },
    {
      "cve": "CVE-2026-33617",
      "cwe": {
        "id": "CWE-497",
        "name": "Exposure of Sensitive System Information to an Unauthorized Control Sphere"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An unauthenticated remote attacker can access a configuration file containing database credentials. This can result in a some loss of confidentiality, but there is no endpoint exposed to use these credentials.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.19.5.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "environmentalScore": 5.3,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 5.3,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Unauthenticated information disclosure in data24 Endpoint"
    }
  ]
}
```

## [vde-2026-024](https://vulnerability.circl.lu/vuln/vde-2026-024)

```json
{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      },
      {
        "names": [
          "Moritz Abrell",
          "Christian Zäske"
        ],
        "organization": "SySS GmbH",
        "summary": "reporting",
        "urls": [
          "https://www.syss.de"
        ]
      }
    ],
    "aggregate_severity": {
      "namespace": "https://www.first.org/cvss/v3.1/specification-document#Qualitative-Severity-Rating-Scale",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "text": "Multiple vulnerabilities have been discovered in MB connect line mbCONNECT24/mymbCONNECT24 that could allow unauthenticated RCE or SQLi.",
        "title": "Summary"
      },
      {
        "category": "description",
        "text": "CVE-2026-32968 allows unauthenticated RCE resulting in full system compromise impacting confidentiality, integrity, and availability, while CVE-2026-32969 allows unauthenticated SQLi resulting in arbitrary read access to the complete database.",
        "title": "Impact"
      },
      {
        "category": "description",
        "text": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.19.4.",
        "title": "Remediation"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "security-team@mbconnectline.de",
      "name": "MB connect line GmbH",
      "namespace": "https://mbconnectline.com"
    },
    "references": [
      {
        "category": "external",
        "summary": "Product security incident reports",
        "url": "https://mbconnectline.com/security-advice"
      },
      {
        "category": "self",
        "summary": "Security Incident Management SIM#2026-02 - PDF",
        "url": "https://advisories.mbconnectline.com/pdf/SIM2026-02.pdf"
      },
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for MB connect line",
        "url": "https://certvde.com/en/advisories/vendor/mbconnectline"
      },
      {
        "category": "self",
        "summary": "VDE-2026-024: MB connect line: Multiple Vulnerabilities in mbCONNECT24/mymbCONNECT24 - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2026-024"
      },
      {
        "category": "self",
        "summary": "VDE-2026-024: MB connect line: Multiple Vulnerabilities in mbCONNECT24/mymbCONNECT24 - CSAF",
        "url": "https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-024.json"
      }
    ],
    "title": "MB connect line: Multiple Vulnerabilities in mbCONNECT24/mymbCONNECT24",
    "tracking": {
      "aliases": [
        "VDE-2026-024",
        "SIM#2026-02"
      ],
      "current_release_date": "2026-03-23T12:00:00.000Z",
      "generator": {
        "date": "2026-03-23T10:36:54.833Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.44"
        }
      },
      "id": "VDE-2026-024",
      "initial_release_date": "2026-03-23T12:00:00.000Z",
      "revision_history": [
        {
          "date": "2026-03-23T12:00:00.000Z",
          "number": "1.0.0",
          "summary": "Initial revision."
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_family",
                "name": "mbCONNECT24",
                "product": {
                  "name": "MB connect line mbCONNECT24",
                  "product_id": "CSAFPID-11001",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:h:mb_connect_line:mbCONNECT24:*:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "mymbCONNECT24",
                "product": {
                  "name": "MB connect line mymbCONNECT24",
                  "product_id": "CSAFPID-11002",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:h:mb_connect_line:mymbCONNECT24:*:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Hardware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:semver/<=2.19.3",
                "product": {
                  "name": "Firmware <=2.19.3",
                  "product_id": "CSAFPID-21001"
                }
              },
              {
                "category": "product_version",
                "name": "2.19.4",
                "product": {
                  "name": "Firmware 2.19.4",
                  "product_id": "CSAFPID-21002",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:mb_connect_line:mbconnect24_firmware:2.19.4:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "2.19.3",
                "product": {
                  "name": "Firmware 2.19.3",
                  "product_id": "CSAFPID-21003",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:mb_connect_line:mbconnect24_firmware:2.19.3:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Firmware"
          }
        ],
        "category": "vendor",
        "name": "MB connect line"
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "product_ids": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ],
        "summary": "Affected products."
      },
      {
        "group_id": "CSAFGID-0002",
        "product_ids": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "summary": "Fixed products."
      }
    ],
    "relationships": [
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=2.19.3 installed on MB connect line mbCONNECT24",
          "product_id": "CSAFPID-31001"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=2.19.3 installed on MB connect line mymbCONNECT24",
          "product_id": "CSAFPID-31002"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.19.3 installed on MB connect line mbCONNECT24",
          "product_id": "CSAFPID-31003"
        },
        "product_reference": "CSAFPID-21003",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.19.3 installed on MB connect line mymbCONNECT24",
          "product_id": "CSAFPID-31004"
        },
        "product_reference": "CSAFPID-21003",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.19.4 installed on MB connect line mbCONNECT24",
          "product_id": "CSAFPID-31005"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.19.4 installed on MB connect line mymbCONNECT24",
          "product_id": "CSAFPID-31006"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11002"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2026-32968",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "Due to the improper neutralisation of special elements used in an OS command, an unauthenticated remote attacker can exploit an RCE vulnerability in the com_mb24sysapi module, resulting in full system compromise. This vulnerability is a variant attack for CVE-2020-10383.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.19.4.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 9.8,
            "environmentalSeverity": "CRITICAL",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 9.8,
            "temporalSeverity": "CRITICAL",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Unauthenticated RCE in com_mb24sysapi"
    },
    {
      "cve": "CVE-2026-32969",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An unauthenticated remote attacker can exploit a Pre-Auth blind SQL Injection vulnerability in the userinfo endpoint’s authentication method due to improper neutralization of special elements in a SQL SELECT command. This can result in a total loss of confidentiality.",
          "title": "CVE Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31005",
          "CSAFPID-31006"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update the mbCONNECT24/mymbCONNECT24 instance to version 2.19.4.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.5,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 7.5,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "Pre-Auth Blind SQLi in userinfo Endpoint"
    }
  ]
}
```

## [vde-2024-068](https://vulnerability.circl.lu/vuln/vde-2024-068)

```json
{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      },
      {
        "names": [
          "Moritz Abrell"
        ],
        "organization": "SySS GmbH",
        "summary": "reporting",
        "urls": [
          "https://www.syss.de"
        ]
      },
      {
        "organization": "Marcel Rick-Cen",
        "summary": "reporting"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "text": "Multiple vulnerabilities have been discovered in MB connect line products that could allow RCE or unauthorized file access.\n\nCVE-2024-45272 affects the mbCONNECT24 and mymbCONNECT24 products.\n\nCVE-2024-45273 affects the mbNET/mbNET.rokey, mbCONNECT24, mymbCONNECT24, mbNET HW1, and mbSPIDER products.\n\nCVE-2024-45275 affects only the mbNET HW1 product.",
        "title": "Summary"
      },
      {
        "category": "description",
        "text": "CVE-2024-45272 allows brute-force attacks against remote credentials with a high probability of success.\n\nCVE-2024-45273 allows undetectable tampering and manipulation of encrypted configuration files.\n\nCVE-2024-45275 allow remote code execution with system privileges, resulting in full compromise of the device\n",
        "title": "Impact"
      },
      {
        "category": "description",
        "text": "Update mbNET/mbNET.rokey to the version 8.2.1\\\nUpdate mbCONNECT24, mymbCONNECT24 to the version 2.16.3\\\n**Note**: mbNET HW1 and mbSPIDER are EOL and will not receive any further updates.",
        "title": "Remediation"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "security-team@mbconnectline.de",
      "name": "MB connect line GmbH",
      "namespace": "https://mbconnectline.com"
    },
    "references": [
      {
        "category": "external",
        "summary": "Product security incident reports",
        "url": "https://mbconnectline.com/security-advice"
      },
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for MB connect line",
        "url": "https://certvde.com/en/advisories/vendor/mbconnectline"
      },
      {
        "category": "self",
        "summary": "VDE-2024-068: MB connect line: Multiple Vulnerabilities in MB connect line Products - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2024-068"
      },
      {
        "category": "self",
        "summary": "Security Incident Management SIM#2024-04 - PDF",
        "url": "https://advisories.mbconnectline.com/pdf/SIM2024-04.pdf"
      },
      {
        "category": "self",
        "summary": "VDE-2024-068: MB connect line: Multiple Vulnerabilities in MB connect line Products - CSAF",
        "url": "https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2024/vde-2024-068.json"
      }
    ],
    "title": "MB connect line: Multiple Vulnerabilities in MB connect line Products",
    "tracking": {
      "aliases": [
        "VDE-2024-068",
        "SIM#2024-04"
      ],
      "current_release_date": "2026-03-06T08:00:00.000Z",
      "generator": {
        "date": "2026-03-06T07:45:42.564Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.43"
        }
      },
      "id": "VDE-2024-068",
      "initial_release_date": "2024-10-15T08:00:00.000Z",
      "revision_history": [
        {
          "date": "2024-10-15T08:00:00.000Z",
          "number": "1.0.0",
          "summary": "Initial revision."
        },
        {
          "date": "2024-11-06T11:27:01.000Z",
          "number": "2.0.0",
          "summary": "Fix: correct certvde domain, added self-reference"
        },
        {
          "date": "2025-05-14T12:28:19.000Z",
          "number": "3.0.0",
          "summary": "Fix: version space"
        },
        {
          "date": "2026-03-06T08:00:00.000Z",
          "number": "4.0.0",
          "summary": "Added CVE-2024-45275"
        }
      ],
      "status": "final",
      "version": "4.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_family",
                "name": "mbCONNECT24",
                "product": {
                  "name": "MB connect line mbCONNECT24",
                  "product_id": "CSAFPID-11001",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:h:mb_connect_line:mbCONNECT24:*:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "mbNET HW1",
                "product": {
                  "name": "MB connect line mbNET HW1",
                  "product_id": "CSAFPID-11002",
                  "product_identification_helper": {
                    "model_numbers": [
                      "MDH 810 (HW01)",
                      "MDH 811 (HW01)",
                      "MDH 814 (HW01)",
                      "MDH 815 (HW01)",
                      "DH 816 (HW01)",
                      "DH 819 (HW01)",
                      "MDH 830 (HW01)",
                      "MDH 831 (HW01)",
                      "MDH 834 (HW01) ",
                      "MDH 835 (HW01)",
                      "DH 841 (HW01)",
                      "MDH 849 (HW01)",
                      "DH 850 EU (HW01)",
                      "MDH 850 AT&T (HW01)",
                      "DH 855 EU (HW01)",
                      "MDH 855 AT&T (HW01)",
                      "MDH 858 EU (HW01)",
                      "MDH 858 AT&T (HW01)",
                      "MDH 859 EU (HW01)",
                      "MDH 859 AT&T (HW01)"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "mbNET/mbNET.rokey",
                "product": {
                  "name": "MB connect line mbNET/mbNET.rokey",
                  "product_id": "CSAFPID-11003",
                  "product_identification_helper": {
                    "model_numbers": [
                      "MDH 811",
                      "MDH 816",
                      "MDH 831",
                      "MDH 835",
                      "MDH 841",
                      "MDH 850 EU",
                      "MDH 850 US",
                      "MDH 855 EU",
                      "MDH 855 US",
                      "MDH 859 EU",
                      "MDH 859 US",
                      "MDH 871",
                      "MDH 876",
                      "RKH 210",
                      "RKH 216",
                      "RKH 235",
                      "RKH 259 EU",
                      "RKH 259 US"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "mbSPIDER",
                "product": {
                  "name": "MB connect line mbSPIDER",
                  "product_id": "CSAFPID-11005",
                  "product_identification_helper": {
                    "model_numbers": [
                      "MDH 900",
                      "MDH 901",
                      "MDH 905",
                      "MDH 906",
                      "MDH 907",
                      "MDH 908",
                      "MDH 910",
                      "MDH 911",
                      "MDH 915",
                      "MDH 916",
                      "MDH 918"
                    ]
                  }
                }
              },
              {
                "category": "product_name",
                "name": "mymbCONNECT24",
                "product": {
                  "name": "MB connect line mymbCONNECT24",
                  "product_id": "CSAFPID-11006",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:h:mb_connect_line:mymbCONNECT24:*:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Hardware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:semver/<=2.16.2",
                "product": {
                  "name": "Firmware <=2.16.2",
                  "product_id": "CSAFPID-21001"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:semver/<=5.1.11",
                "product": {
                  "name": "Firmware <=5.1.11",
                  "product_id": "CSAFPID-21002"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:semver/<=8.2.0",
                "product": {
                  "name": "Firmware <=8.2.0",
                  "product_id": "CSAFPID-21003"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:semver/<=2.6.5",
                "product": {
                  "name": "Firmware <=2.6.5",
                  "product_id": "CSAFPID-21005"
                }
              },
              {
                "category": "product_version",
                "name": "8.2.1",
                "product": {
                  "name": "Firmware 8.2.1",
                  "product_id": "CSAFPID-22002",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:mb_connect_line:firmware:8.2.1:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "2.16.3",
                "product": {
                  "name": "Firmware 2.16.3",
                  "product_id": "CSAFPID-22003",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:mb_connect_line:firmware:2.16.3:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "2.16.2",
                "product": {
                  "name": "Firmware 2.16.2",
                  "product_id": "CSAFPID-21004",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:mb_connect_line:firmware:2.16.2:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "5.1.11",
                "product": {
                  "name": "Firmware 5.1.11",
                  "product_id": "CSAFPID-21006",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:mb_connect_line:firmware:5.1.11:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "8.2.0",
                "product": {
                  "name": "Firmware 8.2.0",
                  "product_id": "CSAFPID-21007",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:mb_connect_line:firmware:8.2.0:*:*:*:*:*:*:*"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "2.6.5",
                "product": {
                  "name": "Firmware 2.6.5",
                  "product_id": "CSAFPID-21008",
                  "product_identification_helper": {
                    "cpe": "cpe:2.3:o:mb_connect_line:firmware:2.6.5:*:*:*:*:*:*:*"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Firmware"
          }
        ],
        "category": "vendor",
        "name": "MB connect line"
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "product_ids": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004",
          "CSAFPID-31006"
        ],
        "summary": "Affected products."
      },
      {
        "group_id": "CSAFGID-0002",
        "product_ids": [
          "CSAFPID-32002",
          "CSAFPID-32003",
          "CSAFPID-32004"
        ],
        "summary": "Fixed products."
      },
      {
        "group_id": "CSAFGID-0003",
        "product_ids": [
          "CSAFPID-33002",
          "CSAFPID-33003",
          "CSAFPID-33001",
          "CSAFPID-33004",
          "CSAFPID-33005"
        ],
        "summary": "Last affected products."
      }
    ],
    "relationships": [
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=2.16.2 installed on MB connect line mbCONNECT24",
          "product_id": "CSAFPID-31001"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=2.16.2 installed on MB connect line mymbCONNECT24",
          "product_id": "CSAFPID-31002"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11006"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=5.1.11 installed on MB connect line mbNET HW1",
          "product_id": "CSAFPID-31003"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=8.2.0 installed on MB connect line mbNET/mbNET.rokey",
          "product_id": "CSAFPID-31004"
        },
        "product_reference": "CSAFPID-21003",
        "relates_to_product_reference": "CSAFPID-11003"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=2.6.5 installed on MB connect line mbSPIDER",
          "product_id": "CSAFPID-31006"
        },
        "product_reference": "CSAFPID-21005",
        "relates_to_product_reference": "CSAFPID-11005"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 8.2.1 installed on MB connect line mbNET/mbNET.rokey",
          "product_id": "CSAFPID-32002",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:mb_connect_line:firmware:8.2.1:*:*:*:*:*:*:*"
          }
        },
        "product_reference": "CSAFPID-22002",
        "relates_to_product_reference": "CSAFPID-11003"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.16.3 installed on MB connect line mbCONNECT24",
          "product_id": "CSAFPID-32003",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:mb_connect_line:firmware:2.16.3:*:*:*:*:*:*:*"
          }
        },
        "product_reference": "CSAFPID-22003",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.16.3 installed on MB connect line mymbCONNECT24",
          "product_id": "CSAFPID-32004",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:mb_connect_line:firmware:2.16.3:*:*:*:*:*:*:*"
          }
        },
        "product_reference": "CSAFPID-22003",
        "relates_to_product_reference": "CSAFPID-11006"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 5.1.11 installed on MB connect line mbNET HW1",
          "product_id": "CSAFPID-33001",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:mb_connect_line:firmware:5.1.11:*:*:*:*:*:*:*"
          }
        },
        "product_reference": "CSAFPID-21006",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.16.2 installed on MB connect line mbCONNECT24",
          "product_id": "CSAFPID-33002",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:mb_connect_line:firmware:2.16.2:*:*:*:*:*:*:*"
          }
        },
        "product_reference": "CSAFPID-21004",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.16.2 installed on MB connect line mymbCONNECT24",
          "product_id": "CSAFPID-33003",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:mb_connect_line:firmware:2.16.2:*:*:*:*:*:*:*"
          }
        },
        "product_reference": "CSAFPID-21004",
        "relates_to_product_reference": "CSAFPID-11006"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.6.5 installed on MB connect line mbSPIDER",
          "product_id": "CSAFPID-33004",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:mb_connect_line:firmware:2.6.5:*:*:*:*:*:*:*"
          }
        },
        "product_reference": "CSAFPID-21008",
        "relates_to_product_reference": "CSAFPID-11005"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 8.2.0 installed on MB connect line mbNET/mbNET.rokey",
          "product_id": "CSAFPID-33005",
          "product_identification_helper": {
            "cpe": "cpe:2.3:o:mb_connect_line:firmware:8.2.0:*:*:*:*:*:*:*"
          }
        },
        "product_reference": "CSAFPID-21007",
        "relates_to_product_reference": "CSAFPID-11003"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-45275",
      "cwe": {
        "id": "CWE-798",
        "name": "Use of Hard-coded Credentials"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "The devices contain two hard coded user accounts with hardcoded passwords that allow an unauthenticated remote attacker for full control of the affected devices.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-31003"
        ],
        "last_affected": [
          "CSAFPID-33001"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "**Note**: mbNET HW1 and mbSPIDER are EOL and will not receive any further updates.",
          "group_ids": [
            "CSAFGID-0001",
            "CSAFGID-0003"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 9.8,
            "environmentalSeverity": "CRITICAL",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 9.8,
            "temporalSeverity": "CRITICAL",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31003",
            "CSAFPID-33001"
          ]
        }
      ],
      "title": "CVE-2024-45275"
    },
    {
      "cve": "CVE-2024-45273",
      "cwe": {
        "id": "CWE-261",
        "name": "Weak Encoding for Password"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32002",
          "CSAFPID-32003",
          "CSAFPID-32004"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004",
          "CSAFPID-31006"
        ],
        "last_affected": [
          "CSAFPID-33002",
          "CSAFPID-33003",
          "CSAFPID-33001",
          "CSAFPID-33004",
          "CSAFPID-33005"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update mbNET/mbNET.rokey to the version 8.2.1\\\nUpdate mbCONNECT24, mymbCONNECT24 to the version 2.16.3\\\n**Note**: mbNET HW1 and mbSPIDER are EOL and will not receive any further updates.",
          "group_ids": [
            "CSAFGID-0001",
            "CSAFGID-0003"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 8.4,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 8.4,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004",
            "CSAFPID-31006",
            "CSAFPID-33002",
            "CSAFPID-33003",
            "CSAFPID-33001",
            "CSAFPID-33004",
            "CSAFPID-33005"
          ]
        }
      ],
      "title": "CVE-2024-45273"
    },
    {
      "cve": "CVE-2024-45272",
      "cwe": {
        "id": "CWE-1391",
        "name": "Use of Weak Credentials"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An unauthenticated remote attacker can perform a brute-force attack on the credentials of the remote service portal with a high chance of success, resulting in connection lost.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32003",
          "CSAFPID-32004"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002"
        ],
        "last_affected": [
          "CSAFPID-33002",
          "CSAFPID-33003"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update mbCONNECT24, mymbCONNECT24 to the version 2.16.3",
          "group_ids": [
            "CSAFGID-0001",
            "CSAFGID-0003"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "environmentalScore": 7.5,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 7.5,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-33002",
            "CSAFPID-33003"
          ]
        }
      ],
      "title": "CVE-2024-45272"
    }
  ]
}
```

## [vde-2024-056](https://vulnerability.circl.lu/vuln/vde-2024-056)

```json
{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      },
      {
        "names": [
          "Moritz Abrell"
        ],
        "organization": "SySS GmbH",
        "summary": "reporting",
        "urls": [
          "https://www.syss.de"
        ]
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "text": "Multiple vulnerabilities have been discovered in MB connect line mbNET.mini product allowing for RCE or unauthorized file access.",
        "title": "Summary"
      },
      {
        "category": "description",
        "text": "CVE-2024-45271, CVE-2024-45274 and CVE-2024-45275 allow remote code execution with system privileges, resulting in full compromise of the device.\n\nCVE-2024-45273 allows undetectable tampering and manipulation of encrypted configuration files.\n\nCVE-2024-45276 allows unauthenticated access to potential sensitive files.",
        "title": "Impact"
      },
      {
        "category": "description",
        "text": "Update mbNET.mini to the version 2.3.1",
        "title": "Remediation"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "security-team@mbconnectline.de",
      "name": "MB connect line GmbH",
      "namespace": "https://mbconnectline.com"
    },
    "references": [
      {
        "category": "external",
        "summary": "Product security incident reports",
        "url": "https://mbconnectline.com/security-advice"
      },
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for MB connect line",
        "url": "https://certvde.com/en/advisories/vendor/mbconnectline"
      },
      {
        "category": "self",
        "summary": "VDE-2024-056: MB connect line: Multiple Vulnerabilities in mbNET.mini Product - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2024-056"
      },
      {
        "category": "self",
        "summary": "Security Incident Management SIM#2024-04 - PDF",
        "url": "https://advisories.mbconnectline.com/pdf/SIM2024-04.pdf"
      },
      {
        "summary": "VDE-2024-056: MB connect line: Multiple Vulnerabilities in mbNET.mini Product - CSAF",
        "url": "https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2024/vde-2024-056.json",
        "category": "self"
      }
    ],
    "title": "MB connect line: Multiple Vulnerabilities in mbNET.mini Product",
    "tracking": {
      "aliases": [
        "VDE-2024-056",
        "SIM#2024-04"
      ],
      "current_release_date": "2025-08-27T10:00:00.000Z",
      "generator": {
        "date": "2025-08-28T07:38:38.503Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.34"
        }
      },
      "id": "VDE-2024-056",
      "initial_release_date": "2024-10-15T08:00:00.000Z",
      "revision_history": [
        {
          "date": "2024-10-15T08:00:00.000Z",
          "number": "1.0.0",
          "summary": "Initial revision."
        },
        {
          "date": "2024-11-06T11:27:01.000Z",
          "number": "1.0.1",
          "summary": "Fix: correct certvde domain, added self-reference"
        },
        {
          "number": "1.0.2",
          "summary": "Fix: version space",
          "date": "2025-05-14T12:28:19.000Z"
        },
        {
          "summary": "Update: CWE from CVE-2024-45271, Revision History",
          "number": "1.1.2",
          "date": "2025-08-27T10:00:00.000Z"
        }
      ],
      "status": "final",
      "version": "1.1.2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "mbNET.mini",
                "product": {
                  "name": "MB connect line mbNET.mini",
                  "product_id": "CSAFPID-11004"
                }
              }
            ],
            "category": "product_family",
            "name": "Hardware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "<=2.2.13",
                "product": {
                  "name": "Firmware <=2.2.13",
                  "product_id": "CSAFPID-21004"
                }
              },
              {
                "category": "product_version",
                "name": "2.3.1",
                "product": {
                  "name": "Firmware 2.3.1",
                  "product_id": "CSAFPID-22001"
                }
              }
            ],
            "category": "product_family",
            "name": "Firmware"
          }
        ],
        "category": "vendor",
        "name": "MB connect line"
      }
    ],
    "relationships": [
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=2.2.13 installed on MB connect line mbNET.mini",
          "product_id": "CSAFPID-31005"
        },
        "product_reference": "CSAFPID-21004",
        "relates_to_product_reference": "CSAFPID-11004"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.3.1 installed on MB connect line mbNET.mini",
          "product_id": "CSAFPID-32001"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11004"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-45274",
      "cwe": {
        "id": "CWE-306",
        "name": "Missing Authentication for Critical Function"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An unauthenticated remote attacker can execute OS commands via UDP on the device due to missing authentication.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001"
        ],
        "known_affected": [
          "CSAFPID-31005"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update mbNET.mini to the version 2.3.1\n",
          "product_ids": [
            "CSAFPID-31005"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 9.8,
            "environmentalSeverity": "CRITICAL",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 9.8,
            "temporalSeverity": "CRITICAL",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31005"
          ]
        }
      ],
      "title": "CVE-2024-45274"
    },
    {
      "cve": "CVE-2024-45275",
      "cwe": {
        "id": "CWE-798",
        "name": "Use of Hard-coded Credentials"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "The devices contain two hard coded user accounts with hardcoded passwords that allow an unauthenticated remote attacker for full control of the affected devices.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001"
        ],
        "known_affected": [
          "CSAFPID-31005"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update mbNET.mini to the version 2.3.1",
          "product_ids": [
            "CSAFPID-31005"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 9.8,
            "environmentalSeverity": "CRITICAL",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 9.8,
            "temporalSeverity": "CRITICAL",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31005"
          ]
        }
      ],
      "title": "CVE-2024-45275"
    },
    {
      "cve": "CVE-2024-45271",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code ('Code Injection')"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An unauthenticated local attacker can gain admin privileges by deploying a config file due to improper input validation.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001"
        ],
        "known_affected": [
          "CSAFPID-31005"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update mbNET.mini to the version 2.3.1",
          "product_ids": [
            "CSAFPID-31005"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 8.4,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 8.4,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31005"
          ]
        }
      ],
      "title": "CVE-2024-45271"
    },
    {
      "cve": "CVE-2024-45273",
      "cwe": {
        "id": "CWE-261",
        "name": "Weak Encoding for Password"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001"
        ],
        "known_affected": [
          "CSAFPID-31005"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update mbNET.mini to the version 2.3.1",
          "product_ids": [
            "CSAFPID-31005"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 8.4,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 8.4,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31005"
          ]
        }
      ],
      "title": "CVE-2024-45273"
    },
    {
      "cve": "CVE-2024-45276",
      "cwe": {
        "id": "CWE-552",
        "name": "Files or Directories Accessible to External Parties"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An unauthenticated remote attacker can get read access to files in the \"/tmp\" directory due to missing authentication.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001"
        ],
        "known_affected": [
          "CSAFPID-31005"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update mbNET.mini to the version 2.3.1",
          "product_ids": [
            "CSAFPID-31005"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.5,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 7.5,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31005"
          ]
        }
      ],
      "title": "CVE-2024-45276"
    }
  ]
}
```

## [vde-2024-010](https://vulnerability.circl.lu/vuln/vde-2024-010)

```json
{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      }
    ],
    "aggregate_severity": {
      "namespace": "https://mbconnectline.com",
      "text": "critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "text": "The data24 service that is bundled with every installation of mbCONNECT24/mymbCONNECT24 has two\nserious flaws in core components. These combined can lead to a complete loss of confidentiality, integrity\nand availability.",
        "title": "Summary"
      },
      {
        "category": "description",
        "text": "CVE-2024-23943: A total loss of confidentiality and integrity, for individual devices or the whole service, is\npossible.\n\nCVE-2024-23942: An attacker in possession of the device's configuration file can impersonate the real\ndevice. This also allows to prevent the real device from connecting successful.",
        "title": "Impact"
      },
      {
        "category": "description",
        "text": "CVE-2024-23942: If the device's serial number is known to mbCONNECT24/mymbCONNECT24 before the\ndownloadable configuration is created, that configuration will be encrypted allowing only the correct device to\ndecrypt it.",
        "title": "Mitigation"
      },
      {
        "category": "description",
        "text": "Update to latest version: 2.16.2\n\nCVE-2024-23943: This fix does not apply to mbNET/mbNET.rokey devices with firmware 8.0.0 - 8.1.3. If you are using a device with this firmware, please update it to >= 8.2.0.",
        "title": "Remediation"
      },
      {
        "category": "general",
        "text": "Always use the latest available firmware version on all devices.",
        "title": "General Recommendation"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "security-team@mbconnectline.de",
      "name": "MB connect line GmbH",
      "namespace": "https://mbconnectline.com"
    },
    "references": [
      {
        "category": "external",
        "summary": "MB connect line GmbH Advisories",
        "url": "https://mbconnectline.com/security-advice"
      },
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for MB connect line GmbH",
        "url": "https://certvde.com/en/advisories/vendor/redlion"
      },
      {
        "category": "self",
        "summary": "VDE-2024-010: Vulnerabilities in mbCONNECT24/mymbCONNECT24 - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2024-010"
      },
      {
        "category": "self",
        "summary": "VDE-2024-010: Vulnerabilities in mbCONNECT24/mymbCONNECT24 - CSAF",
        "url": "https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2024-010.json"
      }
    ],
    "title": "Vulnerabilities in mbCONNECT24/mymbCONNECT24",
    "tracking": {
      "aliases": [
        "VDE-2024-010"
      ],
      "current_release_date": "2025-08-27T10:00:00.000Z",
      "generator": {
        "date": "2025-08-28T07:40:08.713Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.34"
        }
      },
      "id": "VDE-2024-010",
      "initial_release_date": "2025-03-18T11:00:00.000Z",
      "revision_history": [
        {
          "date": "2025-03-18T11:00:00.000Z",
          "number": "1.0.0",
          "summary": "Initial revision."
        },
        {
          "number": "1.0.1",
          "date": "2025-03-31T13:00:00.000Z",
          "summary": "Update: Fixed Document reference CSAF"
        },
        {
          "number": "1.0.2",
          "date": "2025-04-10T13:00:00.000Z",
          "summary": "Update: Fixed document reference URL"
        },
        {
          "number": "1.0.3",
          "summary": "Fix: added distribution",
          "date": "2025-05-14T13:00:14.000Z"
        },
        {
          "summary": "Update: CWE form CVE-2024-23942,  Revision History",
          "number": "1.1.3",
          "date": "2025-08-27T10:00:00.000Z"
        }
      ],
      "status": "final",
      "version": "1.1.3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_name",
                    "name": "mbCONNECT24",
                    "product": {
                      "name": "mbCONNECT24",
                      "product_id": "CSAFPID-11001"
                    }
                  },
                  {
                    "category": "product_name",
                    "name": "mymbCONNECT24",
                    "product": {
                      "name": "mymbCONNECT24",
                      "product_id": "CSAFPID-11002"
                    }
                  }
                ],
                "category": "product_family",
                "name": "mbCONNECT24"
              },
              {
                "branches": [
                  {
                    "category": "product_name",
                    "name": "mbNET",
                    "product": {
                      "name": "mbNET",
                      "product_id": "CSAFPID-11003"
                    }
                  },
                  {
                    "category": "product_name",
                    "name": "mbNET.rokey",
                    "product": {
                      "name": "mbNET.rokey",
                      "product_id": "CSAFPID-11004"
                    }
                  }
                ],
                "category": "product_family",
                "name": "mbNET"
              }
            ],
            "category": "product_family",
            "name": "Hardware"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "2.16.2",
                "product": {
                  "name": "Firmware 2.16.2",
                  "product_id": "CSAFPID-22001"
                }
              },
              {
                "category": "product_version_range",
                "name": "<2.16.2",
                "product": {
                  "name": "Firmware <2.16.2",
                  "product_id": "CSAFPID-21001"
                }
              },
              {
                "category": "product_version",
                "name": "8.2.0",
                "product": {
                  "name": "Firmware 8.2.0",
                  "product_id": "CSAFPID-22003"
                }
              },
              {
                "category": "product_version_range",
                "name": "<8.2.0",
                "product": {
                  "name": "Firmware <8.2.0",
                  "product_id": "CSAFPID-22004"
                }
              }
            ],
            "category": "product_family",
            "name": "Firmware"
          }
        ],
        "category": "vendor",
        "name": "MB connect line"
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "product_ids": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ],
        "summary": "Affected products."
      },
      {
        "group_id": "CSAFGID-0002",
        "product_ids": [
          "CSAFPID-32001",
          "CSAFPID-32002",
          "CSAFPID-32003",
          "CSAFPID-32004"
        ],
        "summary": "Fixed products."
      }
    ],
    "relationships": [
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <2.16.2 installed on mbCONNECT24",
          "product_id": "CSAFPID-31001"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <2.16.2 installed on mymbCONNECT24",
          "product_id": "CSAFPID-31002"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.16.2 installed on mbCONNECT24",
          "product_id": "CSAFPID-32001"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.16.2 installed on mymbCONNECT24",
          "product_id": "CSAFPID-32002"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 8.2.0 installed on mbNET",
          "product_id": "CSAFPID-32003"
        },
        "product_reference": "CSAFPID-11003",
        "relates_to_product_reference": "CSAFPID-22003"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 8.2.0 installed on mbNET.rokey",
          "product_id": "CSAFPID-32004"
        },
        "product_reference": "CSAFPID-11004",
        "relates_to_product_reference": "CSAFPID-22003"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <8.2.0 installed on mbNET",
          "product_id": "CSAFPID-31003"
        },
        "product_reference": "CSAFPID-11003",
        "relates_to_product_reference": "CSAFPID-22004"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <8.2.0 installed on mbNET.rokey",
          "product_id": "CSAFPID-31004"
        },
        "product_reference": "CSAFPID-11004",
        "relates_to_product_reference": "CSAFPID-22004"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-23943",
      "cwe": {
        "id": "CWE-306",
        "name": "Missing Authentication for Critical Function"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An unauthenticated remote attacker can gain access to the cloud API due to a lack of authentication for a critical function in the affected devices. Availability is not affected.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001",
          "CSAFPID-32002",
          "CSAFPID-32003",
          "CSAFPID-32004"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to latest version: 2.16.2\n\nCVE-2024-23943: This fix does not apply to mbNET/mbNET.rokey devices with firmware 8.0.0 - 8.1.3. If you are using a device with this firmware, please update it to >= 8.2.0.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 9.1,
            "environmentalSeverity": "CRITICAL",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 9.1,
            "temporalSeverity": "CRITICAL",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002",
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "CVE-2024-23943"
    },
    {
      "cve": "CVE-2024-23942",
      "cwe": {
        "id": "CWE-312",
        "name": "Cleartext Storage of Sensitive Information"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "A local user may find a configuration file on the client workstation with unencrypted sensitive data. This allows an attacker to impersonate the device or prevent the device from accessing the cloud portal which leads to a DoS.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001",
          "CSAFPID-32002"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "CVE-2024-23942: If the device's serial number is known to mbCONNECT24/mymbCONNECT24 before the\ndownloadable configuration is created, that configuration will be encrypted allowing only the correct device to\ndecrypt it.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.1,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 7.1,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002"
          ]
        }
      ],
      "title": "CVE-2024-23942"
    }
  ]
}
```

## [vde-2025-065](https://vulnerability.circl.lu/vuln/vde-2025-065)

```json
{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      },
      {
        "organization": "Marcel Rick-Cen",
        "summary": "reporting"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "text": "An authenticated remote attacker can exploit an undocumented method to escape the LUA sandbox in mbNET devices, enabling the execution of arbitrary operating system commands and leading to full system compromise.",
        "title": "Summary"
      },
      {
        "category": "description",
        "text": "This vulnerability allows an authenticated remote attacker to fully compromise the system by executing arbitrary OS commands.",
        "title": "Impact"
      },
      {
        "category": "description",
        "text": "Update mbNET/mbNET.rokey to at least version 7.3.0\\\n**Note**: mbNET HW1 is EOL and will not receive any further updates.",
        "title": "Remediation"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "security-team@mbconnectline.de",
      "name": "MB connect line GmbH",
      "namespace": "https://mbconnectline.com"
    },
    "references": [
      {
        "category": "external",
        "summary": "Product security incident reports",
        "url": "https://mbconnectline.com/security-advice"
      },
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for MB connect line",
        "url": "https://certvde.com/en/advisories/vendor/mbconnectline"
      },
      {
        "category": "self",
        "summary": "VDE-2025-065: MB connect line: Sandbox escape in mbNET's LUA interpreter - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2025-065"
      },
      {
        "summary": "VDE-2025-065: MB connect line: Sandbox escape in mbNET's LUA interpreter - CSAF",
        "url": "https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-065.json",
        "category": "self"
      }
    ],
    "title": "MB connect line: Sandbox escape in mbNET's LUA interpreter",
    "tracking": {
      "aliases": [
        "VDE-2025-065"
      ],
      "current_release_date": "2025-07-31T10:00:00.000Z",
      "generator": {
        "date": "2025-07-24T10:26:45.170Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.30"
        }
      },
      "id": "VDE-2025-065",
      "initial_release_date": "2025-07-31T10:00:00.000Z",
      "revision_history": [
        {
          "date": "2025-07-31T10:00:00.000Z",
          "number": "1",
          "summary": "Initial revision."
        }
      ],
      "status": "final",
      "version": "1"
    },
    "aggregate_severity": {
      "namespace": "https://www.first.org/cvss/v3.1/specification-document#Qualitative-Severity-Rating-Scale",
      "text": "High"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "mbNET HW1",
                "product": {
                  "name": "MB connect line mbNET HW1",
                  "product_id": "CSAFPID-11002"
                }
              },
              {
                "category": "product_name",
                "name": "mbNET/mbNET.rokey",
                "product": {
                  "name": "MB connect line mbNET/mbNET.rokey",
                  "product_id": "CSAFPID-11003"
                }
              }
            ],
            "category": "product_family",
            "name": "Hardware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "<=5.1.11",
                "product": {
                  "name": "Firmware <=5.1.11",
                  "product_id": "CSAFPID-21002"
                }
              },
              {
                "category": "product_version_range",
                "name": "<7.3.0",
                "product": {
                  "name": "Firmware <7.3.0",
                  "product_id": "CSAFPID-21003"
                }
              },
              {
                "category": "product_version_range",
                "name": ">=7.3.0",
                "product": {
                  "name": "Firmware >=7.3.0",
                  "product_id": "CSAFPID-22002"
                }
              }
            ],
            "category": "product_family",
            "name": "Firmware"
          }
        ],
        "category": "vendor",
        "name": "MB connect line"
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "product_ids": [
          "CSAFPID-31003",
          "CSAFPID-31004"
        ],
        "summary": "Affected products."
      }
    ],
    "relationships": [
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <=5.1.11 installed on MB connect line mbNET HW1",
          "product_id": "CSAFPID-31003"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <7.3.0 installed on MB connect line mbNET/mbNET.rokey",
          "product_id": "CSAFPID-31004"
        },
        "product_reference": "CSAFPID-21003",
        "relates_to_product_reference": "CSAFPID-11003"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware >=7.3.0 installed on MB connect line mbNET/mbNET.rokey",
          "product_id": "CSAFPID-32002"
        },
        "product_reference": "CSAFPID-22002",
        "relates_to_product_reference": "CSAFPID-11003"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-41688",
      "cwe": {
        "id": "CWE-653",
        "name": "Improper Isolation or Compartmentalization"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "A high privileged remote attacker can execute arbitrary OS commands using an undocumented method allowing to escape the implemented LUA sandbox.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32002"
        ],
        "known_affected": [
          "CSAFPID-31003",
          "CSAFPID-31004"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update mbNET/mbNET.rokey to at least version 7.3.0\\\n**Note**: mbNET HW1 is EOL and will not receive any further updates.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.2,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "temporalScore": 7.2,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31003",
            "CSAFPID-31004"
          ]
        }
      ],
      "title": "CVE-2025-41688"
    }
  ]
}
```

## [vde-2025-058](https://vulnerability.circl.lu/vuln/vde-2025-058)

```json
{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      },
      {
        "names": [
          "Sebastian Dietz"
        ],
        "organization": "CyberDanube",
        "summary": "coordination",
        "urls": [
          "https://cyberdanube.com/"
        ]
      },
      {
        "names": [
          "F. Bruckmoser",
          "M. Eder",
          "J. Heigl",
          "M. Heudorn",
          "G. Hofmarcher",
          "M. Kadlec",
          "M. Pristauz-Telsnigg",
          "S. Resch",
          "P. Schweinzer",
          "M. Gschiel"
        ],
        "organization": "St. Poelten UAS",
        "summary": "reporting",
        "urls": [
          "https://fhstp.ac.at"
        ]
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "text": "Multiple vulnerabilities in all mbNET.mini devices with firmware <= 2.3.2 that allow an attacker to gain full control over the device.",
        "title": "Summary"
      },
      {
        "category": "description",
        "text": "Full control over the device is possible in various ways. For details see CVE description.",
        "title": "Impact"
      },
      {
        "category": "description",
        "text": "Update to latest version: 2.3.3",
        "title": "Remediation"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "security-team@mbconnectline.de",
      "name": "MB connect line GmbH",
      "namespace": "https://mbconnectline.com"
    },
    "references": [
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for MB connect line GmbH",
        "url": "https://certvde.com/en/advisories/vendor/mbconnectline/"
      },
      {
        "category": "self",
        "summary": "VDE-2025-058: MB connect line: Multiple vulnerabilities in mbNET.mini - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2025-058/"
      },
      {
        "category": "self",
        "summary": "VDE-2025-058: MB connect line: Multiple vulnerabilities in mbNET.mini - CSAF",
        "url": "https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-058.json"
      },
      {
        "category": "external",
        "url": "https://mbconnectline.com/security/",
        "summary": "MB connect line PSIRT"
      }
    ],
    "title": "MB connect line: Multiple vulnerabilities in mbNET.mini",
    "tracking": {
      "aliases": [
        "VDE-2025-058"
      ],
      "current_release_date": "2025-07-21T10:00:00.000Z",
      "generator": {
        "date": "2025-07-15T14:45:24.023Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.29"
        }
      },
      "id": "VDE-2025-058",
      "initial_release_date": "2025-07-21T10:00:00.000Z",
      "revision_history": [
        {
          "date": "2025-07-21T10:00:00.000Z",
          "number": "1",
          "summary": "Initial revision."
        }
      ],
      "status": "final",
      "version": "1"
    },
    "aggregate_severity": {
      "namespace": "https://www.first.org/cvss/v3.1/specification-document#Qualitative-Severity-Rating-Scale",
      "text": "Critical"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "mbNET.mini",
                "product": {
                  "name": "mbNET.mini",
                  "product_id": "CSAFPID-11001"
                }
              }
            ],
            "category": "product_family",
            "name": "Hardware"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "2.3.3",
                "product": {
                  "name": "Firmware 2.3.3",
                  "product_id": "CSAFPID-22001"
                }
              },
              {
                "category": "product_version_range",
                "name": "<2.3.3",
                "product": {
                  "name": "Firmware <2.3.3",
                  "product_id": "CSAFPID-21001"
                }
              }
            ],
            "category": "product_family",
            "name": "Firmware"
          }
        ],
        "category": "vendor",
        "name": "MB connect line"
      }
    ],
    "relationships": [
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <2.3.3 installed on mbNET.mini",
          "product_id": "CSAFPID-31001"
        },
        "product_reference": "CSAFPID-11001",
        "relates_to_product_reference": "CSAFPID-21001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.3.3 installed on mbNET.mini",
          "product_id": "CSAFPID-31002"
        },
        "product_reference": "CSAFPID-11001",
        "relates_to_product_reference": "CSAFPID-22001"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-41673",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"
      },
      "notes": [
        {
          "category": "description",
          "text": "A high privileged remote attacker can execute arbitrary system commands via POST requests in the send_sms action due to improper neutralization of special elements used in an OS command.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31002"
        ],
        "known_affected": [
          "CSAFPID-31001"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As this is an authenticated exploit, you can mitigate it by making sure that no malicious actor can login to a vulnerable device.",
          "product_ids": [
            "CSAFPID-31001"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to latest version: 2.3.3",
          "product_ids": [
            "CSAFPID-31001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.2,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "temporalScore": 7.2,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001"
          ]
        }
      ],
      "title": "CVE-2025-41673"
    },
    {
      "cve": "CVE-2025-41674",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"
      },
      "notes": [
        {
          "category": "description",
          "text": "A high privileged remote attacker can execute arbitrary system commands via POST requests in the diagnostic action due to improper neutralization of special elements used in an OS command.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31002"
        ],
        "known_affected": [
          "CSAFPID-31001"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As this is an authenticated exploit, you can mitigate it by making sure that no malicious actor can login to a vulnerable device.",
          "product_ids": [
            "CSAFPID-31001"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to latest version: 2.3.3",
          "product_ids": [
            "CSAFPID-31001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.2,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "temporalScore": 7.2,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001"
          ]
        }
      ],
      "title": "CVE-2025-41674"
    },
    {
      "cve": "CVE-2025-41675",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"
      },
      "notes": [
        {
          "category": "description",
          "text": "A high privileged remote attacker can execute arbitrary system commands via GET requests in the cloud server communication script due to improper neutralization of special elements used in an OS command.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31002"
        ],
        "known_affected": [
          "CSAFPID-31001"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As this is an authenticated exploit, you can mitigate it by making sure that no malicious actor can login to a vulnerable device.",
          "product_ids": [
            "CSAFPID-31001"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to latest version: 2.3.3",
          "product_ids": [
            "CSAFPID-31001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.2,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "temporalScore": 7.2,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001"
          ]
        }
      ],
      "title": "CVE-2025-41675"
    },
    {
      "cve": "CVE-2025-41676",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "description",
          "text": "A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-sms action in fast succession.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31002"
        ],
        "known_affected": [
          "CSAFPID-31001"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As this is an authenticated exploit, you can mitigate it by making sure that no malicious actor can login to a vulnerable device.",
          "product_ids": [
            "CSAFPID-31001"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to latest version: 2.3.3",
          "product_ids": [
            "CSAFPID-31001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "environmentalScore": 4.9,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "temporalScore": 4.9,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001"
          ]
        }
      ],
      "title": "CVE-2025-41676"
    },
    {
      "cve": "CVE-2025-41677",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "description",
          "text": "A high privileged remote attacker can exhaust critical system resources by sending specifically crafted POST requests to the send-mail action in fast succession.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31002"
        ],
        "known_affected": [
          "CSAFPID-31001"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As this is an authenticated exploit, you can mitigate it by making sure that no malicious actor can login to a vulnerable device.",
          "product_ids": [
            "CSAFPID-31001"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to latest version: 2.3.3",
          "product_ids": [
            "CSAFPID-31001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 4.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "environmentalScore": 4.9,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "temporalScore": 4.9,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001"
          ]
        }
      ],
      "title": "CVE-2025-41677"
    },
    {
      "cve": "CVE-2025-41678",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "category": "description",
          "text": "A high privileged remote attacker can alter the configuration database via POST requests due to improper neutralization of special elements used in a SQL statement.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31002"
        ],
        "known_affected": [
          "CSAFPID-31001"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As this is an authenticated exploit, you can mitigate it by making sure that no malicious actor can login to a vulnerable device.",
          "product_ids": [
            "CSAFPID-31001"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to latest version: 2.3.3",
          "product_ids": [
            "CSAFPID-31001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "environmentalScore": 6.5,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "temporalScore": 6.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001"
          ]
        }
      ],
      "title": "CVE-2025-41678"
    },
    {
      "cve": "CVE-2025-41679",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "category": "description",
          "text": "An unauthenticated remote attacker could exploit a buffer overflow vulnerability in the device causing a denial of service that affects only the network initializing wizard (Conftool) service.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31002"
        ],
        "known_affected": [
          "CSAFPID-31001"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to latest version: 2.3.3",
          "product_ids": [
            "CSAFPID-31001"
          ]
        },
        {
          "category": "mitigation",
          "details": "Enable \"Lock network configuration (Conftool)\" in device configuration (enabled by default after device comes online for the first time).",
          "product_ids": [
            "CSAFPID-31001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "environmentalScore": 5.3,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 5.3,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001"
          ]
        }
      ],
      "title": "CVE-2025-41679"
    },
    {
      "cve": "CVE-2025-41681",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"
      },
      "notes": [
        {
          "category": "description",
          "text": "A high privileged remote attacker can gain persistent XSS via POST requests due to improper neutralization of special elements used to create dynamic content.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-31002"
        ],
        "known_affected": [
          "CSAFPID-31001"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As this is an authenticated exploit, you can mitigate it by making sure that no malicious actor can login to a vulnerable device.",
          "product_ids": [
            "CSAFPID-31001"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to latest version: 2.3.3",
          "product_ids": [
            "CSAFPID-31001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "environmentalScore": 4.8,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "temporalScore": 4.8,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001"
          ]
        }
      ],
      "title": "CVE-2025-41681"
    }
  ]
}
```

## [vde-2025-035](https://vulnerability.circl.lu/vuln/vde-2025-035)

```json
{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      },
      {
        "names": [
          "Peter Husted Simonsen",
          "Irwin Przeperski"
        ],
        "organization": "Eviden",
        "summary": "reporting"
      }
    ],
    "aggregate_severity": {
      "namespace": "https://mbconnectline.com",
      "text": "critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "text": "Two vulnerabilities in mbCONNECT24/mymbCONNECT24 can lead to user enumeration an password bypass.",
        "title": "Summary"
      },
      {
        "category": "description",
        "text": "CVE-2025-3091: An attacker in possession of the second factor for an user can login as that user without knowledge of the password (first factor)\n\nCVE-2025-3092: An unprotected endpoint can by used to enumerate valid user names.",
        "title": "Impact"
      },
      {
        "category": "description",
        "text": "CVE-2025-3091: Update to latest version: 2.16.5\n\nCVE-2025-3092: Update to latest version: 2.18.0",
        "title": "Remediation"
      },
      {
        "category": "general",
        "text": "Always use the latest available firmware version on all devices.",
        "title": "General Recommendation"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "security-team@mbconnectline.de",
      "name": "MB connect line GmbH",
      "namespace": "https://mbconnectline.com"
    },
    "references": [
      {
        "category": "external",
        "summary": "MB connect line GmbH Advisories",
        "url": "https://mbconnectline.com/security-advice"
      },
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for MB connect line GmbH",
        "url": "https://certvde.com/en/advisories/vendor/mbconnectline"
      },
      {
        "category": "self",
        "summary": "VDE-2025-035: Vulnerabilities in mbCONNECT24/mymbCONNECT24 - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2025-035"
      },
      {
        "category": "self",
        "summary": "VDE-2025-035: Vulnerabilities in mbCONNECT24/mymbCONNECT24 - CSAF",
        "url": "https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-035.json"
      }
    ],
    "title": "Vulnerabilities in mbCONNECT24/mymbCONNECT24",
    "tracking": {
      "aliases": [
        "VDE-2025-035"
      ],
      "current_release_date": "2025-06-24T10:00:00.000Z",
      "generator": {
        "date": "2025-06-16T07:15:43.019Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.26"
        }
      },
      "id": "VDE-2025-035",
      "initial_release_date": "2025-06-24T10:00:00.000Z",
      "revision_history": [
        {
          "date": "2025-06-24T10:00:00.000Z",
          "number": "1",
          "summary": "Initial revision."
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_name",
                    "name": "mbCONNECT24",
                    "product": {
                      "name": "mbCONNECT24",
                      "product_id": "CSAFPID-11001"
                    }
                  },
                  {
                    "category": "product_name",
                    "name": "mymbCONNECT24",
                    "product": {
                      "name": "mymbCONNECT24",
                      "product_id": "CSAFPID-11002"
                    }
                  }
                ],
                "category": "product_family",
                "name": "mbCONNECT24"
              }
            ],
            "category": "product_family",
            "name": "Hardware"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "2.18.0",
                "product": {
                  "name": "Firmware 2.18.0",
                  "product_id": "CSAFPID-22001"
                }
              },
              {
                "category": "product_version_range",
                "name": "<2.18.0",
                "product": {
                  "name": "Firmware <2.18.0",
                  "product_id": "CSAFPID-21002"
                }
              },
              {
                "category": "product_version",
                "name": "2.16.5",
                "product": {
                  "name": "Firmware 2.16.5",
                  "product_id": "CSAFPID-22003"
                }
              },
              {
                "category": "product_version_range",
                "name": "<2.16.5",
                "product": {
                  "name": "Firmware <2.16.5",
                  "product_id": "CSAFPID-22004"
                }
              }
            ],
            "category": "product_family",
            "name": "Firmware"
          }
        ],
        "category": "vendor",
        "name": "MB connect line GmbH"
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "product_ids": [
          "CSAFPID-31001",
          "CSAFPID-31002",
          "CSAFPID-33001",
          "CSAFPID-33002"
        ],
        "summary": "Affected products."
      },
      {
        "group_id": "CSAFGID-0002",
        "product_ids": [
          "CSAFPID-32001",
          "CSAFPID-32002",
          "CSAFPID-34001",
          "CSAFPID-34002"
        ],
        "summary": "Fixed products."
      }
    ],
    "relationships": [
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <2.16.5 installed on mbCONNECT24",
          "product_id": "CSAFPID-31001"
        },
        "product_reference": "CSAFPID-22004",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <2.16.5 installed on mymbCONNECT24",
          "product_id": "CSAFPID-31002"
        },
        "product_reference": "CSAFPID-22004",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.16.5 installed on mbCONNECT24",
          "product_id": "CSAFPID-32001"
        },
        "product_reference": "CSAFPID-22003",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.16.5 installed on mymbCONNECT24",
          "product_id": "CSAFPID-32002"
        },
        "product_reference": "CSAFPID-22003",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <2.18.0 installed on mbCONNECT24",
          "product_id": "CSAFPID-33001"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <2.18.0 installed on mymbCONNECT24",
          "product_id": "CSAFPID-33002"
        },
        "product_reference": "CSAFPID-21002",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.18.0 installed on mbCONNECT24",
          "product_id": "CSAFPID-34001"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.18.0 installed on mymbCONNECT24",
          "product_id": "CSAFPID-34002"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11002"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-3091",
      "cwe": {
        "id": "CWE-639",
        "name": "Authorization Bypass Through User-Controlled Key"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An low privileged remote attacker in possession of the second factor for another user can login as that user without knowledge of the other user`s password.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001",
          "CSAFPID-32002"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to latest version: 2.16.5",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.5,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 7.5,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002"
          ]
        }
      ],
      "title": "CVE-2025-3091"
    },
    {
      "cve": "CVE-2025-3092",
      "cwe": {
        "id": "CWE-204",
        "name": "Observable Response Discrepancy"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An unauthenticated remote attacker can enumerate valid user names from an unprotected endpoint.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-34001",
          "CSAFPID-34002"
        ],
        "known_affected": [
          "CSAFPID-33001",
          "CSAFPID-33002"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to latest version: 2.18.0",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.5,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 7.5,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-33001",
            "CSAFPID-33002"
          ]
        }
      ],
      "title": "CVE-2025-3092"
    }
  ]
}
```

## [vde-2025-034](https://vulnerability.circl.lu/vuln/vde-2025-034)

```json
{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      }
    ],
    "aggregate_severity": {
      "namespace": "https://mbconnectline.com",
      "text": "critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "text": "The mb24api endpoint reachable when connected via VPN is missing authentication for sensitive functions. This can lead to information disclosure of user- and device names and to DoS.",
        "title": "Summary"
      },
      {
        "category": "description",
        "text": "Some limited sensitive data can be accessed and a DoS can be performed targeting a specific user/device.",
        "title": "Impact"
      },
      {
        "category": "description",
        "text": "Update to latest version: 2.18.0",
        "title": "Remediation"
      },
      {
        "category": "general",
        "text": "Always use the latest available firmware version on all devices.",
        "title": "General Recommendation"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "security-team@mbconnectline.de",
      "name": "MB connect line GmbH",
      "namespace": "https://mbconnectline.com"
    },
    "references": [
      {
        "category": "external",
        "summary": "MB connect line GmbH Advisories",
        "url": "https://mbconnectline.com/security-advice"
      },
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for MB connect line GmbH",
        "url": "https://certvde.com/en/advisories/vendor/mbconnectline"
      },
      {
        "category": "self",
        "summary": "VDE-2025-034: Vulnerabilities in mbCONNECT24/mymbCONNECT24 - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2025-034"
      },
      {
        "category": "self",
        "summary": "VDE-2025-034: Vulnerabilities in mbCONNECT24/mymbCONNECT24 - CSAF",
        "url": "https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-034.json"
      }
    ],
    "title": "Vulnerabilities in mbCONNECT24/mymbCONNECT24",
    "tracking": {
      "aliases": [
        "VDE-2025-034"
      ],
      "current_release_date": "2025-06-24T10:00:00.000Z",
      "generator": {
        "date": "2025-04-17T12:54:26.864Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.18"
        }
      },
      "id": "VDE-2025-034",
      "initial_release_date": "2025-06-24T10:00:00.000Z",
      "revision_history": [
        {
          "date": "2025-06-24T10:00:00.000Z",
          "number": "1",
          "summary": "Initial revision."
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_name",
                    "name": "mbCONNECT24",
                    "product": {
                      "name": "mbCONNECT24",
                      "product_id": "CSAFPID-11001"
                    }
                  },
                  {
                    "category": "product_name",
                    "name": "mymbCONNECT24",
                    "product": {
                      "name": "mymbCONNECT24",
                      "product_id": "CSAFPID-11002"
                    }
                  }
                ],
                "category": "product_family",
                "name": "mbCONNECT24"
              }
            ],
            "category": "product_family",
            "name": "Hardware"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "2.18.0",
                "product": {
                  "name": "Firmware 2.18.0",
                  "product_id": "CSAFPID-22001"
                }
              },
              {
                "category": "product_version_range",
                "name": "<2.17.1",
                "product": {
                  "name": "Firmware <2.18.0",
                  "product_id": "CSAFPID-21001"
                }
              }
            ],
            "category": "product_family",
            "name": "Firmware"
          }
        ],
        "category": "vendor",
        "name": "MB connect line GmbH"
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "product_ids": [
          "CSAFPID-31001",
          "CSAFPID-31002"
        ],
        "summary": "Affected products."
      },
      {
        "group_id": "CSAFGID-0002",
        "product_ids": [
          "CSAFPID-32001",
          "CSAFPID-32002"
        ],
        "summary": "Fixed products."
      }
    ],
    "relationships": [
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <2.18.0 installed on mbCONNECT24",
          "product_id": "CSAFPID-31001"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware <2.18.0 installed on mymbCONNECT24",
          "product_id": "CSAFPID-31002"
        },
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.18.0 installed on mbCONNECT24",
          "product_id": "CSAFPID-32001"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "Firmware 2.18.0 installed on mymbCONNECT24",
          "product_id": "CSAFPID-32002"
        },
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11002"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-3090",
      "cwe": {
        "id": "CWE-306",
        "name": "Missing Authentication for Critical Function"
      },
      "notes": [
        {
          "audience": "all",
          "category": "description",
          "text": "An unauthenticated remote attacker can obtain limited sensitive information and/or DoS the device due to missing authentication for critical function.\n",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-32001",
          "CSAFPID-32002"
        ],
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to latest version: 2.18.0",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "environmentalScore": 8.2,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 8.2,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002"
          ]
        }
      ],
      "title": "CVE-2025-3090"
    }
  ]
}
```

## [vde-2021-030](https://vulnerability.circl.lu/vuln/vde-2021-030)

```json
{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      },
      {
        "organization": "OTORIO",
        "summary": "reporting"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "text": "Two issues have been discovered in mymbCONNECT24 and mbCONNECT24 in all versionsincluding V2.8.0.\n\nUpdated affected versions (and solution) due to incomplete fixes in previous versions",
        "title": "Summary"
      },
      {
        "category": "description",
        "text": "CVE-2021-34575: Update to 2.9.0\n\nCVE-2021-34574: Update to 2.12.1",
        "title": "Remediation"
      }
    ],
    "publisher": {
      "contact_details": "security-team@mbconnectline.de",
      "name": "MB connect line GmbH",
      "namespace": "https://mbconnectline.com",
      "category": "vendor"
    },
    "references": [
      {
        "category": "self",
        "summary": "VDE-2021-030: MB connect line: two vulnerabilities in mymbCONNECT24, mbCONNECT24 (Update A) - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2021-030/"
      },
      {
        "category": "self",
        "summary": "VDE-2021-030: MB connect line: two vulnerabilities in mymbCONNECT24, mbCONNECT24 (Update A) - CSAF",
        "url": "https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2022/vde-2021-030.json"
      },
      {
        "category": "external",
        "summary": "Vendor PSIRT",
        "url": "https://mbconnectline.com"
      },
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for MB connect line GmbH",
        "url": "https://certvde.com/en/advisories/vendor/mbconnectline/"
      }
    ],
    "title": "MB connect line: two vulnerabilities in mymbCONNECT24, mbCONNECT24 (Update A)",
    "tracking": {
      "aliases": [
        "VDE-2021-030"
      ],
      "current_release_date": "2025-06-06T07:00:00.000Z",
      "generator": {
        "date": "2025-06-06T07:43:36.709Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.27"
        }
      },
      "id": "VDE-2021-030",
      "initial_release_date": "2022-09-07T10:48:00.000Z",
      "revision_history": [
        {
          "date": "2022-09-07T10:48:00.000Z",
          "number": "1.0.0",
          "summary": "Initial revision."
        },
        {
          "number": "1.1.0",
          "summary": "Update A",
          "date": "2022-09-07T14:00:00.000Z"
        },
        {
          "summary": "Fixed CVE-IDs in Solution/Remidiation",
          "number": "1.2.0",
          "date": "2025-06-06T07:00:00.000Z"
        }
      ],
      "status": "final",
      "version": "1.2.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "name": "MB connect line",
        "category": "vendor",
        "branches": [
          {
            "name": "Software",
            "category": "product_family",
            "branches": [
              {
                "name": "mbCONNECT24",
                "category": "product_name",
                "branches": [
                  {
                    "name": "<=2.11.2",
                    "category": "product_version_range",
                    "product": {
                      "name": "mbCONNECT24 <=2.11.2",
                      "product_id": "CSAFPID-51001"
                    }
                  },
                  {
                    "name": "2.12.1",
                    "category": "product_version",
                    "product": {
                      "name": "mbCONNECT24 2.12.1",
                      "product_id": "CSAFPID-52001"
                    }
                  },
                  {
                    "name": "2.9.0",
                    "category": "product_version",
                    "product": {
                      "name": "MB connect line Software mbCONNECT24 2.9.0",
                      "product_id": "CSAFPID-52002"
                    }
                  }
                ]
              },
              {
                "name": "mymbCONNECT24",
                "category": "product_name",
                "branches": [
                  {
                    "name": "<=2.11.2",
                    "category": "product_version_range",
                    "product": {
                      "name": "mymbCONNECT24 <=2.11.2",
                      "product_id": "CSAFPID-51002"
                    }
                  },
                  {
                    "name": "2.12.1",
                    "category": "product_version",
                    "product": {
                      "name": "mymbCONNECT24 2.12.1",
                      "product_id": "CSAFPID-52003"
                    }
                  },
                  {
                    "name": "2.9.0",
                    "category": "product_version",
                    "product": {
                      "name": "MB connect line Software mymbCONNECT24 2.9.0",
                      "product_id": "CSAFPID-52004"
                    }
                  }
                ]
              }
            ]
          }
        ]
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "product_ids": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ],
        "summary": "Affected products."
      },
      {
        "group_id": "CSAFGID-0002",
        "product_ids": [
          "CSAFPID-52001",
          "CSAFPID-52002",
          "CSAFPID-52003",
          "CSAFPID-52004"
        ],
        "summary": "Fixed products."
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-34574",
      "cwe": {
        "id": "CWE-669",
        "name": "Incorrect Resource Transfer Between Spheres"
      },
      "notes": [
        {
          "category": "description",
          "text": "In MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 an authenticated attacker can change the password of his account into a new password that violates the password policy by intercepting and modifying the request that is send to the server.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52003"
        ],
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "CVE-2021-34575: Update to 2.9.0\n\nCVE-2021-34574: Update to 2.12.1",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "environmentalScore": 4.3,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 4.3,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ],
      "title": "CVE-2021-34574"
    },
    {
      "cve": "CVE-2021-34575",
      "cwe": {
        "id": "CWE-203",
        "name": "Observable Discrepancy"
      },
      "notes": [
        {
          "category": "description",
          "text": "In MB connect line mymbCONNECT24, mbCONNECT24 in versions <= 2.8.0 an unauthenticated user can enumerate valid users by checking what kind of response the server sends.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-52002",
          "CSAFPID-52004"
        ],
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "CVE-2021-34575: Update to 2.9.0\n\nCVE-2021-34574: Update to 2.12.1",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.5,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 7.5,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ],
      "title": "CVE-2021-34575"
    }
  ]
}
```

## [vde-2023-002](https://vulnerability.circl.lu/vuln/vde-2023-002)

```json
{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "tracking": {
      "generator": {
        "date": "2025-04-16T10:14:24.527Z",
        "engine": {
          "version": "2.5.23",
          "name": "Secvisogram"
        }
      },
      "id": "vde-2023-002",
      "version": "2",
      "status": "final",
      "aliases": [
        "VDE-2023-002"
      ],
      "revision_history": [
        {
          "number": "1",
          "summary": "initial revision",
          "date": "2023-05-15T14:06:00.000Z"
        },
        {
          "number": "2",
          "summary": "Fix: added distribution",
          "date": "2025-05-14T13:00:14.000Z"
        }
      ],
      "current_release_date": "2025-05-14T13:00:14.000Z",
      "initial_release_date": "2023-05-15T14:06:00.000Z"
    },
    "lang": "en-GB",
    "title": "MB Connect Line: Multiple vulnerabilities in mbConnect24 and mymbConnect24",
    "acknowledgments": [
      {
        "organization": "CERTVDE",
        "urls": [
          "https://certvde.com"
        ],
        "summary": "coordination"
      },
      {
        "organization": "Helmholz GmbH & Co. KG",
        "summary": "reporting",
        "urls": [
          "https://www.helmholz.de"
        ]
      },
      {
        "summary": "reporting",
        "names": [
          "Hussein Alsharafi"
        ]
      }
    ],
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "notes": [
      {
        "category": "summary",
        "title": "Summary",
        "text": "Two vulnerabilites have been discovered in mbCONNECT24 and mbCONNECT24 in all versions through 2.13.3."
      },
      {
        "category": "description",
        "title": "Impact",
        "text": "Please consult the CVE Entries."
      },
      {
        "category": "description",
        "title": "Mitigation",
        "text": "For CVE-2023-0985: If you have MFA enabled on the admin user, the password will still be set, but the attacker will be unable to login as the MFA is still in place."
      },
      {
        "category": "description",
        "title": "Remediation",
        "text": "Update to latest Version: 2.13.4"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "security-team@mbconnectline.de",
      "name": "MB connect line GmbH",
      "namespace": "https://mbconnectline.com"
    },
    "references": [
      {
        "summary": "vde-2023-002: MB Connect Line: Multiple vulnerabilities in mbConnect24 and mymbConnect24 - HTML",
        "url": "https://certvde.com/de/advisories/vde-2023-002/",
        "category": "self"
      },
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for ",
        "url": "https://certvde.com/en/advisories/vendor/mbconnectline/"
      },
      {
        "summary": "vde-2023-002: MB Connect Line: Multiple vulnerabilities in mbConnect24 and mymbConnect24 - CSAF",
        "url": "https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2023/vde-2023-002.json",
        "category": "self"
      }
    ]
  },
  "product_tree": {
    "branches": [
      {
        "category": "vendor",
        "name": "MB connect line GmbH",
        "branches": [
          {
            "category": "product_family",
            "name": "Hardware",
            "branches": [
              {
                "category": "product_name",
                "name": "mbCONNECT24",
                "product": {
                  "name": "mbCONNECT24",
                  "product_id": "CSAFPID-11001"
                }
              },
              {
                "category": "product_name",
                "name": "mymbCONNECT24",
                "product": {
                  "name": "mymbCONNECT24",
                  "product_id": "CSAFPID-11002"
                }
              }
            ]
          },
          {
            "category": "product_family",
            "name": "Firmware",
            "branches": [
              {
                "category": "product_version_range",
                "name": "<=2.13.3",
                "product": {
                  "name": "Firmware <=2.13.3",
                  "product_id": "CSAFPID-21001"
                }
              },
              {
                "category": "product_version",
                "name": "2.13.4",
                "product": {
                  "name": "Firmware 2.13.4",
                  "product_id": "CSAFPID-22001"
                }
              }
            ]
          }
        ]
      }
    ],
    "relationships": [
      {
        "category": "installed_on",
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11001",
        "full_product_name": {
          "name": "Firmware <=2.13.3 installed on mbCONNECT24",
          "product_id": "CSAFPID-31001"
        }
      },
      {
        "category": "installed_on",
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11001",
        "full_product_name": {
          "name": "Firmware 2.13.4 installed on mbCONNECT24",
          "product_id": "CSAFPID-32001"
        }
      },
      {
        "category": "installed_on",
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11002",
        "full_product_name": {
          "name": "Firmware <=2.13.3 installed on mymbCONNECT24",
          "product_id": "CSAFPID-31002"
        }
      },
      {
        "category": "installed_on",
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11002",
        "full_product_name": {
          "name": "Firmware 2.13.4 installed on mymbCONNECT24",
          "product_id": "CSAFPID-32002"
        }
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "summary": "affected products",
        "product_ids": [
          "CSAFPID-31001",
          "CSAFPID-31002"
        ]
      },
      {
        "group_id": "CSAFGID-0002",
        "summary": "fixed products",
        "product_ids": [
          "CSAFPID-32001",
          "CSAFPID-32002"
        ]
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-0985",
      "title": "CVE-2023-0985",
      "product_status": {
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002"
        ],
        "fixed": [
          "CSAFPID-32001",
          "CSAFPID-32002"
        ]
      },
      "scores": [
        {
          "cvss_v3": {
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH",
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "temporalScore": 8.8,
            "temporalSeverity": "HIGH",
            "environmentalScore": 8.8,
            "environmentalSeverity": "HIGH"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002"
          ]
        }
      ],
      "notes": [
        {
          "category": "summary",
          "text": "An Authorization Bypass vulnerability was found in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual version <= 2.13.3. An authenticated remote user with low privileges can change the password of any user in the same account. This allows to take over the admin user and therefore fully compromise the account."
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "If you have MFA enabled on the admin user, the password will still be set, but the attacker will be unable to login as the MFA is still in place.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to latest Version: 2.13.4",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "cwe": {
        "id": "CWE-639",
        "name": "Authorization Bypass Through User-Controlled Key"
      }
    },
    {
      "cve": "CVE-2023-1779",
      "title": "CVE-2023-1779",
      "product_status": {
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002"
        ],
        "fixed": [
          "CSAFPID-32001",
          "CSAFPID-32002"
        ]
      },
      "scores": [
        {
          "cvss_v3": {
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "availabilityImpact": "NONE",
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "temporalScore": 4.3,
            "temporalSeverity": "MEDIUM",
            "environmentalScore": 4.3,
            "environmentalSeverity": "MEDIUM"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002"
          ]
        }
      ],
      "notes": [
        {
          "category": "summary",
          "text": "Exposure of Sensitive Information to an unauthorized actor vulnerability in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual in versions <=2.13.3 allow an authorized remote attacker with low privileges to view a limited amount of another accounts contact information."
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to latest Version: 2.13.4",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      }
    }
  ]
}
```

## [vde-2021-037](https://vulnerability.circl.lu/vuln/vde-2021-037)

```json
{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      },
      {
        "organization": "LEWA Attendorn GmbH",
        "summary": "reporting."
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "text": "An issue was discovered in the mymbCONNECT24 and mbCONNECT24 software in all versions through V2.9.0.",
        "title": "Summary"
      },
      {
        "category": "description",
        "text": "Please consult the CVE Entry above.",
        "title": "Impact"
      },
      {
        "title": "Remediation",
        "category": "description",
        "text": "Update mbCONNECT24/mymbCONNECT24 to 2.10.1"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "security-team@mbconnectline.de",
      "name": "MB connect line GmbH",
      "namespace": "https://mbconnectline.com"
    },
    "references": [
      {
        "category": "external",
        "summary": "MB connect line advisory overview at CERT@VDE",
        "url": "https://certvde.com/de/advisories/vendor/mbconnectline/"
      },
      {
        "category": "self",
        "summary": "VDE-2021-037: MB connect line: Remote user enumeration in mbCONNECT24/mymbCONNECT24 - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2021-037"
      },
      {
        "summary": "VDE-2021-037: MB connect line: Remote user enumeration in mbCONNECT24/mymbCONNECT24 - CSAF",
        "url": "https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2021/vde-2021-037.json",
        "category": "self"
      }
    ],
    "title": "MB connect line: Remote user enumeration in mbCONNECT24/mymbCONNECT24",
    "tracking": {
      "aliases": [
        "VDE-2021-037"
      ],
      "current_release_date": "2025-05-14T12:28:19.000Z",
      "generator": {
        "date": "2025-03-21T11:49:51.085Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.21"
        }
      },
      "id": "VDE-2021-037",
      "initial_release_date": "2021-10-27T10:15:00.000Z",
      "revision_history": [
        {
          "date": "2021-10-27T10:15:00.000Z",
          "number": "1",
          "summary": "Initial revision."
        },
        {
          "number": "2",
          "summary": "Fix: firmware category",
          "date": "2025-05-14T12:28:19.000Z"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "summary": "Affected Products.",
        "product_ids": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ]
      },
      {
        "group_id": "CSAFGID-0002",
        "summary": "Fixed Products.",
        "product_ids": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ]
      }
    ],
    "branches": [
      {
        "category": "vendor",
        "name": "MB connect line",
        "branches": [
          {
            "name": "Software",
            "category": "product_family",
            "branches": [
              {
                "name": "mbCONNECT24",
                "category": "product_name",
                "branches": [
                  {
                    "name": "<=2.9.0",
                    "category": "product_version_range",
                    "product": {
                      "name": "mbCONNECT24 <=2.9.0",
                      "product_id": "CSAFPID-51001"
                    }
                  },
                  {
                    "name": "2.10.1",
                    "category": "product_version",
                    "product": {
                      "name": "mbCONNECT24 2.10.1",
                      "product_id": "CSAFPID-52001"
                    }
                  }
                ]
              },
              {
                "name": "mymbCONNECT24",
                "branches": [
                  {
                    "name": "<=2.9.0",
                    "category": "product_version_range",
                    "product": {
                      "name": "mymbCONNECT24 <=2.9.0",
                      "product_id": "CSAFPID-51002"
                    }
                  },
                  {
                    "name": "2.10.1",
                    "category": "product_version",
                    "product": {
                      "name": "mymbCONNECT24 2.10.1",
                      "product_id": "CSAFPID-52002"
                    }
                  }
                ],
                "category": "product_name"
              }
            ]
          }
        ]
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-34580",
      "title": "CVE-2021-34580",
      "cwe": {
        "id": "CWE-204",
        "name": "Observable Response Discrepancy"
      },
      "notes": [
        {
          "title": "Vulnerability Description",
          "category": "description",
          "text": "An unauthenticated user can enumerate valid backend users by checking what kind of response the server sends for crafted invalid login attempts."
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ],
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ]
      },
      "remediations": [
        {
          "details": "Update mbCONNECT24/mymbCONNECT24 to 2.10.1",
          "category": "vendor_fix",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "temporalScore": 7.5,
            "temporalSeverity": "HIGH",
            "environmentalScore": 7.5,
            "environmentalSeverity": "HIGH",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "availabilityImpact": "NONE"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ]
    }
  ]
}
```

## [vde-2021-031](https://vulnerability.circl.lu/vuln/vde-2021-031)

```json
{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "summary",
        "text": "Two vulnerabilities in mbCONNECT24 and mymbCONNECT24 can lead to information disclosure and arbitrary code execution.\n\nPlease consult the CVE entries for details.",
        "title": "Summary"
      },
      {
        "title": "Remediation",
        "text": "Update to 2.9.0",
        "category": "description"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "security-team@mbconnectline.de",
      "name": "MB connect line GmbH",
      "namespace": "https://mbconnectline.com"
    },
    "references": [
      {
        "category": "external",
        "summary": "MB connect line advisory overview at CERT@VDE",
        "url": "https://certvde.com/en/advisories/vendor/mbconnectline/"
      },
      {
        "category": "self",
        "summary": "VDE-2021-031: MB connect line: Apache Guacamole related vulnerabilities in mbCONNECT24 - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2021-031"
      },
      {
        "summary": "VDE-2021-031: MB connect line: Apache Guacamole related vulnerabilities in mbCONNECT24 - CSAF",
        "url": "https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2021/vde-2021-031.json",
        "category": "self"
      }
    ],
    "title": "MB connect line: Apache Guacamole related vulnerabilities in mbCONNECT24",
    "tracking": {
      "aliases": [
        "VDE-2021-031"
      ],
      "current_release_date": "2025-05-14T12:28:19.000Z",
      "generator": {
        "date": "2025-01-27T09:53:05.468Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.17"
        }
      },
      "id": "VDE-2021-031",
      "initial_release_date": "2021-07-22T11:33:00.000Z",
      "revision_history": [
        {
          "date": "2021-07-22T11:35:00.000Z",
          "number": "1",
          "summary": "Initial revision."
        },
        {
          "number": "2",
          "summary": "Fix: version space, added distribution",
          "date": "2025-05-14T12:28:19.000Z"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "category": "vendor",
        "name": "MB connect line",
        "branches": [
          {
            "category": "product_family",
            "name": "Software",
            "branches": [
              {
                "name": "mbCONNECT24",
                "category": "product_name",
                "branches": [
                  {
                    "name": "<=2.8.0",
                    "category": "product_version_range",
                    "product": {
                      "product_id": "CSAFPID-51001",
                      "name": "mbCONNECT24 <=2.8.0"
                    }
                  },
                  {
                    "name": "2.9.0",
                    "category": "product_version",
                    "product": {
                      "name": "mbCONNECT24 2.9.0",
                      "product_id": "CSAFPID-52001"
                    }
                  }
                ]
              },
              {
                "name": "mymbCONNECT24",
                "category": "product_name",
                "branches": [
                  {
                    "name": "<=2.8.0",
                    "category": "product_version_range",
                    "product": {
                      "name": "mymbCONNECT24 <=2.8.0",
                      "product_id": "CSAFPID-51002"
                    }
                  },
                  {
                    "name": "2.9.0",
                    "category": "product_version",
                    "product": {
                      "name": "mymbCONNECT24 2.9.0",
                      "product_id": "CSAFPID-52002"
                    }
                  }
                ]
              }
            ]
          }
        ]
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "summary": "Affected Products",
        "product_ids": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ]
      },
      {
        "group_id": "CSAFGID-0002",
        "summary": "Fixed Products",
        "product_ids": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ]
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-9498",
      "title": "CVE-2020-9498",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "notes": [
        {
          "title": "Vulnerability Description",
          "category": "description",
          "text": "Apache Guacamole 1.1.0 and older may mishandle pointers involved inprocessing data received via RDP static virtual channels. If a userconnects to a malicious or compromised RDP server, a series ofspecially-crafted PDUs could result in memory corruption, possiblyallowing arbitrary code to be executed with the privileges of therunning guacd process."
        }
      ],
      "remediations": [
        {
          "details": "Update to 3.9R0.5",
          "category": "vendor_fix",
          "product_ids": [
            "CSAFPID-51001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "temporalScore": 6.7,
            "temporalSeverity": "MEDIUM",
            "environmentalScore": 6.7,
            "environmentalSeverity": "MEDIUM",
            "attackVector": "LOCAL",
            "attackComplexity": "HIGH",
            "privilegesRequired": "LOW",
            "userInteraction": "REQUIRED",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ],
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ]
      }
    },
    {
      "cve": "CVE-2020-9497",
      "title": "CVE-2020-9497",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "title": "Vulnerability Description",
          "category": "description",
          "text": "Apache Guacamole 1.1.0 and older do not properly validate datareceived from RDP servers via static virtual channels. If a userconnects to a malicious or compromised RDP server, specially-craftedPDUs could result in disclosure of information within the memory ofthe guacd process handling the connection."
        }
      ],
      "remediations": [
        {
          "details": "Update to 3.9R0.5",
          "category": "vendor_fix",
          "product_ids": [
            "CSAFPID-51001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "temporalScore": 4.4,
            "temporalSeverity": "MEDIUM",
            "environmentalScore": 4.4,
            "environmentalSeverity": "MEDIUM",
            "attackVector": "LOCAL",
            "attackComplexity": "HIGH",
            "privilegesRequired": "LOW",
            "userInteraction": "REQUIRED",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "availabilityImpact": "NONE"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ],
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ]
      }
    }
  ]
}
```

## [vde-2021-017](https://vulnerability.circl.lu/vuln/vde-2021-017)

```json
{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      },
      {
        "summary": "reported",
        "organization": "Claroty",
        "names": [
          "Noam Moshe"
        ]
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "summary",
        "text": "Multiple Vulnerabilities in mbConnect24serv (a software service of mbDIALUP) can lead to arbitrary code execution due to improper privilege management.\n\nUpdate A, 2021-11-24\n\ncorrected fixed version in solution from 3.9R0.4 to 3.9R0.5\n\nUpdate B, 2022-03-28\n\nUpdated CVSS score from CVE-2021-33527 from 7.8 to 9.8 due to new information about the vulnerability",
        "title": "Summary"
      },
      {
        "title": "Remediation",
        "text": "Update to 3.9R0.5",
        "category": "description"
      },
      {
        "category": "description",
        "title": "Impact",
        "text": "Please consult the CVE entries."
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "security-team@mbconnectline.de",
      "name": "MB connect line GmbH",
      "namespace": "https://mbconnectline.com"
    },
    "references": [
      {
        "category": "external",
        "summary": "MB connect line advisory overview at CERT@VDE",
        "url": "https://certvde.com/en/advisories/vendor/mbconnectline/"
      },
      {
        "category": "self",
        "summary": "VDE-2021-017: MB connect line: Privilege escalation in mbDIALUP - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2021-017"
      },
      {
        "summary": "VDE-2021-017: MB connect line: Privilege escalation in mbDIALUP - CSAF",
        "url": "https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2021/vde-2021-017.json",
        "category": "self"
      }
    ],
    "title": "MB connect line: Privilege escalation in mbDIALUP",
    "tracking": {
      "aliases": [
        "VDE-2021-017"
      ],
      "current_release_date": "2025-05-14T12:28:19.000Z",
      "generator": {
        "date": "2025-01-22T15:02:02.970Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.17"
        }
      },
      "id": "VDE-2021-017",
      "initial_release_date": "2021-07-22T11:35:00.000Z",
      "revision_history": [
        {
          "date": "2021-07-22T11:35:00.000Z",
          "number": "1",
          "summary": "Initial revision."
        },
        {
          "number": "2",
          "summary": "Update A",
          "date": "2021-11-24T11:00:00.000Z"
        },
        {
          "date": "2022-03-28T10:00:00.000Z",
          "number": "3",
          "summary": "Update B"
        },
        {
          "number": "4",
          "summary": "Fix: version space, added distribution",
          "date": "2025-05-14T12:28:19.000Z"
        }
      ],
      "status": "final",
      "version": "4"
    }
  },
  "product_tree": {
    "branches": [
      {
        "category": "vendor",
        "name": "MB connect line",
        "branches": [
          {
            "category": "product_family",
            "name": "Software",
            "branches": [
              {
                "name": "mbDIALUP",
                "category": "product_name",
                "branches": [
                  {
                    "name": "<=3.9R0.0",
                    "category": "product_version_range",
                    "product": {
                      "product_id": "CSAFPID-51001",
                      "name": "mbDIALUP <=3.9R0.0"
                    }
                  },
                  {
                    "name": "3.9R0.5",
                    "category": "product_version",
                    "product": {
                      "name": "mbDIALUP 3.9R0.5",
                      "product_id": "CSAFPID-52002"
                    }
                  }
                ]
              }
            ]
          }
        ]
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2021-33527",
      "title": "CVE-2021-33527",
      "cwe": {
        "id": "CWE-20",
        "name": "Improper Input Validation"
      },
      "notes": [
        {
          "title": "Vulnerability Description",
          "category": "description",
          "text": "In MB connect line mbDIALUP versions <=3.9R0.0 a remote attacker can send a specifically crafted HTTP request to the service running with NT AUTHORITY\\SYSTEM that will not correctly validate the input. This can lead to an arbitrary code execution with the privileges of the service."
        }
      ],
      "remediations": [
        {
          "details": "Update to 3.9R0.5",
          "category": "vendor_fix",
          "product_ids": [
            "CSAFPID-51001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "temporalScore": 9.8,
            "temporalSeverity": "CRITICAL",
            "environmentalScore": 9.8,
            "environmentalSeverity": "CRITICAL",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH"
          },
          "products": [
            "CSAFPID-51001"
          ]
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-51001"
        ],
        "fixed": [
          "CSAFPID-52002"
        ]
      }
    },
    {
      "cve": "CVE-2021-33526",
      "title": "CVE-2021-33526",
      "cwe": {
        "id": "CWE-269",
        "name": "Improper Privilege Management"
      },
      "notes": [
        {
          "title": "Vulnerability Description",
          "category": "description",
          "text": "In MB connect line mbDIALUP versions <=3.9R0.0 a low privileged local attacker can send a command to the service running with NT AUTHORITY\\SYSTEM instructing it to execute a malicous OpenVPN configuration resulting in arbitrary code execution with the privileges of the service."
        }
      ],
      "remediations": [
        {
          "details": "Update to 3.9R0.5",
          "category": "vendor_fix",
          "product_ids": [
            "CSAFPID-51001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "temporalScore": 7.8,
            "temporalSeverity": "HIGH",
            "environmentalScore": 7.8,
            "environmentalSeverity": "HIGH",
            "attackVector": "LOCAL",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH"
          },
          "products": [
            "CSAFPID-51001"
          ]
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-51001"
        ],
        "fixed": [
          "CSAFPID-52002"
        ]
      }
    }
  ]
}
```

## [vde-2021-012](https://vulnerability.circl.lu/vuln/vde-2021-012)

```json
{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "text": "Multiple issues have been identified in dnsmasq < 2.83",
        "title": "Summary"
      },
      {
        "title": "Impact",
        "text": "Please see the CVE-IDs for details.",
        "category": "description"
      },
      {
        "title": "Remediation",
        "category": "description",
        "text": "Update to the following versions:\n\n| Product            | Fixed Version |\n|--------------------|-------------------|\n| mbNET/mbNET .rokey | >= 7.0.0         |\n| mbNET HW1         | >= 5.1.11         |\n"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "security-team@mbconnectline.de",
      "name": "MB connect line GmbH",
      "namespace": "https://mbconnectline.com"
    },
    "references": [
      {
        "category": "external",
        "summary": "MB connect line advisory overview at CERT@VDE",
        "url": "https://certvde.com/en/advisories/vendor/mbconnectline/"
      },
      {
        "category": "self",
        "summary": "VDE-2021-012: MB connect line: multiple products partially affected by DNSpooq - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2021-012"
      },
      {
        "summary": "VDE-2021-012: MB connect line: multiple products partially affected by DNSpooq - CSAF",
        "url": "https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2021/vde-2021-012.json",
        "category": "self"
      }
    ],
    "title": "MB connect line: multiple products partially affected by DNSpooq",
    "tracking": {
      "aliases": [
        "VDE-2021-012"
      ],
      "current_release_date": "2025-05-14T12:28:19.000Z",
      "generator": {
        "date": "2025-02-10T13:47:32.328Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.18"
        }
      },
      "id": "VDE-2021-012",
      "initial_release_date": "2021-04-26T08:04:00.000Z",
      "revision_history": [
        {
          "date": "2021-04-26T08:04:00.000Z",
          "number": "1",
          "summary": "Initial revision."
        },
        {
          "number": "2",
          "summary": "Fix: version space",
          "date": "2025-05-14T12:28:19.000Z"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "category": "vendor",
        "name": "MB connect line",
        "branches": [
          {
            "name": "Software",
            "category": "product_family",
            "branches": [
              {
                "name": "mbNET HW1",
                "category": "product_name",
                "branches": [
                  {
                    "name": "<=5.1.10",
                    "category": "product_version_range",
                    "product": {
                      "name": "mbNET HW1 <=5.1.10",
                      "product_id": "CSAFPID-51001"
                    }
                  },
                  {
                    "name": "5.1.11",
                    "category": "product_version",
                    "product": {
                      "name": "mbNET HW1 5.1.11",
                      "product_id": "CSAFPID-52001"
                    }
                  }
                ]
              },
              {
                "name": "mbNET/mbNET .rokey",
                "category": "product_name",
                "branches": [
                  {
                    "name": "<=6.2.5",
                    "category": "product_version_range",
                    "product": {
                      "name": "mbNET/mbNET .rokey <=6.2.5",
                      "product_id": "CSAFPID-51002"
                    }
                  },
                  {
                    "name": "7.0.0",
                    "category": "product_version",
                    "product": {
                      "name": "mbNET/mbNET .rokey 7.0.0",
                      "product_id": "CSAFPID-52002"
                    }
                  }
                ]
              }
            ]
          }
        ]
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "summary": "affected products",
        "product_ids": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ]
      },
      {
        "group_id": "CSAFGID-0002",
        "summary": "fixed products",
        "product_ids": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ]
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-25684",
      "title": "CVE-2020-25684",
      "cwe": {
        "id": "CWE-358",
        "name": "Improperly Implemented Security Check for Standard"
      },
      "notes": [
        {
          "title": "Vulnerability Description",
          "category": "description",
          "text": "A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in the forward.c:reply_query() if the reply destination address/port is used by the pending forwarded queries. However, it does not use the address/port to retrieve the exact forwarded query, substantially reducing the number of attempts an attacker on the network would have to perform to forge a reply and get it accepted by dnsmasq. This issue contrasts with RFC5452, which specifies a query's attributes that all must be used to match a reply. This flaw allows an attacker to perform a DNS Cache Poisoning attack. If chained with CVE-2020-25685 or CVE-2020-25686, the attack complexity of a successful attack is reduced. The highest threat from this vulnerability is to data integrity."
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to the following versions:\n\n| Product            | Fixed Version |\n|--------------------|-------------------|\n| mbNET/mbNET .rokey | >= 7.0.0         |\n| mbNET HW1         | >= 5.1.11         |\n",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "temporalScore": 3.7,
            "temporalSeverity": "LOW",
            "environmentalScore": 3.7,
            "environmentalSeverity": "LOW",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "availabilityImpact": "NONE"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ],
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ]
      }
    },
    {
      "cve": "CVE-2020-25685",
      "title": "CVE-2020-25685",
      "cwe": {
        "id": "CWE-326",
        "name": "Inadequate Encryption Strength"
      },
      "notes": [
        {
          "title": "Vulnerability Description",
          "category": "description",
          "text": "A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward.c:reply_query(), which is the forwarded query that matches the reply, by only using a weak hash of the query name. Due to the weak hash (CRC32 when dnsmasq is compiled without DNSSEC, SHA-1 when it is) this flaw allows an off-path attacker to find several different domains all having the same hash, substantially reducing the number of attempts they would have to perform to forge a reply and get it accepted by dnsmasq. This is in contrast with RFC5452, which specifies that the query name is one of the attributes of a query that must be used to match a reply. This flaw could be abused to perform a DNS Cache Poisoning attack. If chained with CVE-2020-25684 the attack complexity of a successful attack is reduced. The highest threat from this vulnerability is to data integrity."
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to the following versions:\n\n| Product            | Fixed Version |\n|--------------------|-------------------|\n| mbNET/mbNET .rokey | >= 7.0.0         |\n| mbNET HW1         | >= 5.1.11         |\n",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "temporalScore": 3.7,
            "temporalSeverity": "LOW",
            "environmentalScore": 3.7,
            "environmentalSeverity": "LOW",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "availabilityImpact": "NONE"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ],
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ]
      }
    },
    {
      "cve": "CVE-2020-25686",
      "title": "CVE-2020-25686",
      "cwe": {
        "id": "CWE-358",
        "name": "Improperly Implemented Security Check for Standard"
      },
      "notes": [
        {
          "title": "Vulnerability Description",
          "category": "description",
          "text": "A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending request for the same name and forwards a new request. By default, a maximum of 150 pending queries can be sent to upstream servers, so there can be at most 150 queries for the same name. This flaw allows an off-path attacker on the network to substantially reduce the number of attempts that it would have to perform to forge a reply and have it accepted by dnsmasq. This issue is mentioned in the \"Birthday Attacks\" section of RFC5452. If chained with CVE-2020-25684, the attack complexity of a successful attack is reduced. The highest threat from this vulnerability is to data integrity."
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to the following versions:\n\n| Product            | Fixed Version |\n|--------------------|-------------------|\n| mbNET/mbNET .rokey | >= 7.0.0         |\n| mbNET HW1         | >= 5.1.11         |\n",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "temporalScore": 3.7,
            "temporalSeverity": "LOW",
            "environmentalScore": 3.7,
            "environmentalSeverity": "LOW",
            "attackVector": "NETWORK",
            "attackComplexity": "HIGH",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "availabilityImpact": "NONE"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ],
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ]
      }
    }
  ]
}
```

## [vde-2020-035](https://vulnerability.circl.lu/vuln/vde-2020-035)

```json
{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "tracking": {
      "generator": {
        "date": "2024-09-30T11:26:22.467Z",
        "engine": {
          "version": "2.5.12",
          "name": "Secvisogram"
        }
      },
      "current_release_date": "2025-05-14T12:28:19.000Z",
      "id": "VDE-2020-035",
      "initial_release_date": "2020-09-18T12:30:00.000Z",
      "status": "final",
      "version": "4",
      "revision_history": [
        {
          "date": "2020-09-18T12:30:00.000Z",
          "number": "1",
          "summary": "Initial revision."
        },
        {
          "date": "2024-11-06T11:27:01.000Z",
          "number": "2",
          "summary": "Fix: added self-reference"
        },
        {
          "date": "2025-02-12T16:48:47.000Z",
          "number": "3",
          "summary": "Fix: corrected self-reference, fixed version"
        },
        {
          "number": "4",
          "summary": "Fix: removed ia, added distribution",
          "date": "2025-05-14T12:28:19.000Z"
        }
      ],
      "aliases": [
        "VDE-2020-035"
      ]
    },
    "lang": "en-GB",
    "title": "MB connect line: Multiple Vulnerabilities in mymbCONNECT24 and mbCONNECT24 <= v2.6.1",
    "acknowledgments": [
      {
        "summary": "reported",
        "organization": "OTORIO ",
        "names": [
          "Sharon Brizinov",
          "Tal Keren"
        ]
      },
      {
        "summary": "coordination",
        "organization": "CERT@VDE"
      }
    ],
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "notes": [
      {
        "category": "summary",
        "title": "Summary",
        "text": "Multiples issues exist in mymbCONNECT24 and mbCONNECT24"
      },
      {
        "category": "description",
        "title": "Impact",
        "text": "Please consult the above CVEs for details."
      },
      {
        "title": "Remediation",
        "text": "Update mymbCONNECT24 and mbCONNECT24 to version >v2.6.1",
        "category": "description"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "security-team@mbconnectline.de",
      "name": "MB connect line GmbH",
      "namespace": "https://mbconnectline.com"
    },
    "references": [
      {
        "summary": "CERT@VDE Security Advisories for MB connect line GmbH",
        "url": "https://certvde.com/de/advisories/vendor/mbconnectline/",
        "category": "external"
      },
      {
        "summary": "VDE-2020-035: MB connect line: Multiple Vulnerabilities in mymbCONNECT24 and mbCONNECT24 <= v2.6.1 - HTML",
        "category": "self",
        "url": "https://certvde.com/de/advisories/VDE-2020-035/"
      },
      {
        "summary": "VDE-2020-035: MB connect line: Multiple Vulnerabilities in mymbCONNECT24 and mbCONNECT24 <= v2.6.1 - CSAF",
        "url": "https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2020/vde-2020-035.json",
        "category": "self"
      }
    ]
  },
  "product_tree": {
    "branches": [
      {
        "category": "vendor",
        "name": "MB connect line",
        "branches": [
          {
            "category": "product_family",
            "name": "Software",
            "branches": [
              {
                "name": "mbCONNECT24",
                "category": "product_name",
                "branches": [
                  {
                    "name": "<=2.6.1",
                    "category": "product_version_range",
                    "product": {
                      "name": "Software mbCONNECT24 <=2.6.1",
                      "product_id": "CSAFPID-51001"
                    }
                  },
                  {
                    "name": ">v2.6.1",
                    "category": "product_version_range",
                    "product": {
                      "name": "Software mbCONNECT24 >v2.6.1",
                      "product_id": "CSAFPID-52001"
                    }
                  }
                ]
              },
              {
                "name": "mymbCONNECT24",
                "category": "product_name",
                "branches": [
                  {
                    "name": "<=2.6.1",
                    "category": "product_version_range",
                    "product": {
                      "name": "Software mymbCONNECT24 <=2.6.1",
                      "product_id": "CSAFPID-51002"
                    }
                  },
                  {
                    "name": ">v2.6.1",
                    "category": "product_version_range",
                    "product": {
                      "name": "Software mymbCONNECT24 >v2.6.1",
                      "product_id": "CSAFPID-52002"
                    }
                  }
                ]
              }
            ]
          }
        ]
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "summary": "Affected products.",
        "product_ids": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ]
      },
      {
        "group_id": "CSAFGID-0002",
        "summary": "Fixed products.",
        "product_ids": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ]
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-24568",
      "title": "CVE-2020-24568",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "title": "Vulnerability Description",
          "category": "description",
          "audience": "all",
          "text": "An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a blind SQL injection in the lancompenent component, allowing logged-in attackers to discover arbitrary information."
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update mymbCONNECT24 and mbCONNECT24 to version >v2.6.1",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "temporalScore": 6.5,
            "temporalSeverity": "MEDIUM",
            "environmentalScore": 6.5,
            "environmentalSeverity": "MEDIUM",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "availabilityImpact": "NONE"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ],
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ]
      }
    },
    {
      "cve": "CVE-2020-24570",
      "title": "CVE-2020-24570",
      "cwe": {
        "id": "CWE-352",
        "name": "Cross-Site Request Forgery (CSRF)"
      },
      "notes": [
        {
          "title": "Vulnerability Description",
          "category": "description",
          "audience": "all",
          "text": "An issue was discovered in the mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.1. There is a SSRF and CSRF issue, in the com_mb24proxy module, allowing attackers to steal session information from logged in users with a specifically crafted link."
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ],
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update mymbCONNECT24 and mbCONNECT24 to version >v2.6.1",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "temporalScore": 6.5,
            "temporalSeverity": "MEDIUM",
            "environmentalScore": 6.5,
            "environmentalSeverity": "MEDIUM",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "REQUIRED",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "availabilityImpact": "NONE"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ]
    },
    {
      "cve": "CVE-2020-24569",
      "title": "CVE-2020-24569",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"
      },
      "notes": [
        {
          "title": "Vulnerability Description",
          "category": "description",
          "text": "An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a blind SQL injection in the knximport component via an advanced attack vector, allowing logged in attackers to discover arbitrary information."
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ],
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update mymbCONNECT24 and mbCONNECT24 to version >v2.6.1",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "temporalScore": 4.3,
            "temporalSeverity": "MEDIUM",
            "environmentalScore": 4.3,
            "environmentalSeverity": "MEDIUM",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "LOW",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "availabilityImpact": "NONE"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ]
    }
  ]
}
```

## [vde-2024-030](https://vulnerability.circl.lu/vuln/vde-2024-030)

```json
{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      },
      {
        "names": [
          "M. Ankith"
        ],
        "organization": "Honeywell",
        "summary": "reporting"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "text": "There exists a vulnerability in all mbNET.mini devices with firmware <= 2.2.11 that allows an authenticated attacker to execute arbitrary system commands via GET requests.\nUpdate: 03.07.2024 3:30 pm \nIn section Reported by Sebastian Dietz (CyberDanube) was added.",
        "title": "Summary"
      },
      {
        "category": "description",
        "text": "See CVE description.",
        "title": "Impact"
      },
      {
        "category": "description",
        "text": "As this is an authenticated exploit, you can mitigate it by making sure that no malicious actor can login to a vulnerable device.",
        "title": "Mitigation"
      },
      {
        "category": "description",
        "text": "Update to latest version: 2.2.13",
        "title": "Remediation"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "security-team@mbconnectline.de",
      "name": "MB connect line GmbH",
      "namespace": "https://mbconnectline.com"
    },
    "references": [
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for MB connect line GmbH",
        "url": "https://certvde.com/en/advisories/vendor/mbconnectline/"
      },
      {
        "category": "self",
        "summary": "VDE-2024-030: MB connect line: mbNET.mini vulnerable to OS command injection - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2024-030/"
      },
      {
        "category": "self",
        "summary": "VDE-2024-030: MB connect line: mbNET.mini vulnerable to OS command injection - CSAF",
        "url": "https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2024/vde-2024-030.json"
      }
    ],
    "title": "MB connect line: mbNET.mini vulnerable to OS command injection",
    "tracking": {
      "aliases": [
        "VDE-2024-030"
      ],
      "current_release_date": "2024-07-03T09:00:00.000Z",
      "generator": {
        "date": "2025-06-05T07:54:43.151Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.27"
        }
      },
      "id": "VDE-2024-030",
      "initial_release_date": "2024-07-03T09:00:00.000Z",
      "revision_history": [
        {
          "date": "2024-07-03T09:00:00.000Z",
          "number": "1",
          "summary": "Initial revision."
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "name": "MB connect line",
        "category": "vendor",
        "branches": [
          {
            "name": "Software",
            "category": "product_family",
            "branches": [
              {
                "name": "mbNET.mini",
                "category": "product_name",
                "branches": [
                  {
                    "name": "<=2.2.11",
                    "category": "product_version_range",
                    "product": {
                      "name": "mbNET.mini <=2.2.11",
                      "product_id": "CSAFPID-51001"
                    }
                  },
                  {
                    "name": "2.2.13",
                    "category": "product_version",
                    "product": {
                      "name": "mbNET.mini 2.2.13",
                      "product_id": "CSAFPID-52001"
                    }
                  }
                ]
              }
            ]
          }
        ]
      },
      {
        "name": "Red Lion Europe",
        "category": "vendor",
        "branches": [
          {
            "name": "Software",
            "category": "product_family",
            "branches": [
              {
                "name": "mbNET.mini",
                "category": "product_name",
                "branches": [
                  {
                    "name": "<=2.2.11",
                    "category": "product_version_range",
                    "product": {
                      "name": "mbNET.mini <=2.2.11",
                      "product_id": "CSAFPID-51002"
                    }
                  },
                  {
                    "name": "2.2.13",
                    "category": "product_version",
                    "product": {
                      "name": "mbNET.mini 2.2.13",
                      "product_id": "CSAFPID-52002"
                    }
                  }
                ]
              }
            ]
          }
        ]
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "product_ids": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ],
        "summary": "Affected products "
      },
      {
        "group_id": "CSAFGID-0002",
        "product_ids": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ],
        "summary": "Fixed products"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-5672",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"
      },
      "notes": [
        {
          "category": "description",
          "text": "A high privileged remote attacker can execute arbitrary system commands via GET requests due to improper neutralization of special elements used in an OS command.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ],
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "As this is an authenticated exploit, you can mitigate it by making sure that no malicious actor can login to a vulnerable device.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to latest version: 2.2.13",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "title": "CVE-2024-5672",
      "scores": [
        {
          "cvss_v3": {
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "temporalScore": 7.2,
            "temporalSeverity": "HIGH",
            "environmentalScore": 7.2,
            "environmentalSeverity": "HIGH",
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "HIGH",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "availabilityImpact": "HIGH"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ]
    }
  ]
}
```

## [vde-2023-041](https://vulnerability.circl.lu/vuln/vde-2023-041)

```json
{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      },
      {
        "organization": "OTORIO",
        "summary": "reporting"
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "title": "Summary",
        "text": "In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implemented access validation allows an authenticated, low privileged attacker to gain read access to limited, non-critical device information in his account he should not have access to."
      },
      {
        "category": "description",
        "title": "Impact",
        "text": "An authenticated, low privileged attacker can gain read access to limited, non-critical device information in his account he should not have access to."
      },
      {
        "title": "Remediation",
        "text": "Update to latest Version 2.14.3",
        "category": "description"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "security-team@mbconnectline.de",
      "name": "MB connect line GmbH",
      "namespace": "https://mbconnectline.com"
    },
    "references": [
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for MB connect line GmbH",
        "url": "https://certvde.com/en/advisories/vendor/mbconnectline"
      },
      {
        "category": "self",
        "summary": "VDE-2023-041: MB connect line: Vulnerability allows access to non-critical information in mbCONNECT24 and mymbCONNECT24 - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2023-041/"
      },
      {
        "category": "self",
        "summary": "VDE-2023-041: MB connect line: Vulnerability allows access to non-critical information in mbCONNECT24 and mymbCONNECT24 - CSAF",
        "url": "https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2023/vde-2023-041.json"
      },
      {
        "category": "external",
        "summary": "MB connect line Security Advice",
        "url": "https://mbconnectline.com/security-advice/"
      }
    ],
    "title": "MB connect line: Vulnerability allows access to non-critical information in mbCONNECT24 and mymbCONNECT24",
    "tracking": {
      "aliases": [
        "VDE-2023-041"
      ],
      "current_release_date": "2023-10-16T08:38:00.000Z",
      "generator": {
        "date": "2025-06-25T06:20:08.262Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.28"
        }
      },
      "id": "VDE-2023-041",
      "initial_release_date": "2023-10-16T08:38:00.000Z",
      "revision_history": [
        {
          "date": "2023-10-16T08:38:00.000Z",
          "number": "1.0.0",
          "summary": "Initial revision."
        }
      ],
      "status": "final",
      "version": "1.0.0"
    },
    "aggregate_severity": {
      "namespace": "https://www.first.org/cvss/v3.1/specification-document#Qualitative-Severity-Rating-Scale",
      "text": "Medium"
    }
  },
  "product_tree": {
    "branches": [
      {
        "name": "MB connect line",
        "category": "vendor",
        "branches": [
          {
            "name": "Software",
            "category": "product_family",
            "branches": [
              {
                "name": "mbCONNECT24",
                "category": "product_name",
                "branches": [
                  {
                    "name": "<=2.14.2",
                    "category": "product_version_range",
                    "product": {
                      "name": "mbCONNECT24 <=2.14.2",
                      "product_id": "CSAFPID-51003"
                    }
                  },
                  {
                    "name": "2.14.3",
                    "category": "product_version",
                    "product": {
                      "name": "mbCONNECT24 2.14.3",
                      "product_id": "CSAFPID-52003"
                    }
                  }
                ]
              },
              {
                "name": "mymbCONNECT24",
                "category": "product_name",
                "branches": [
                  {
                    "name": "<=2.14.2",
                    "category": "product_version_range",
                    "product": {
                      "name": "mymbCONNECT24 <=2.14.2",
                      "product_id": "CSAFPID-51004"
                    }
                  },
                  {
                    "name": "2.14.3",
                    "category": "product_version",
                    "product": {
                      "name": "mymbCONNECT24 2.14.3",
                      "product_id": "CSAFPID-52004"
                    }
                  }
                ]
              }
            ]
          }
        ]
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "product_ids": [
          "CSAFPID-51003",
          "CSAFPID-51004"
        ],
        "summary": "Affected products "
      },
      {
        "group_id": "CSAFGID-0002",
        "product_ids": [
          "CSAFPID-52003",
          "CSAFPID-52004"
        ],
        "summary": "Fixed products"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-4834",
      "cwe": {
        "id": "CWE-269",
        "name": "Improper Privilege Management"
      },
      "notes": [
        {
          "category": "description",
          "text": "In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implemented access validation allows an authenticated, low privileged attacker to gain read access to limited, non-critical device information in his account he should not have access to.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-51003",
          "CSAFPID-51004"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to latest Version 2.14.3",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "environmentalScore": 4.3,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 4.3,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-51003",
            "CSAFPID-51004"
          ]
        }
      ],
      "title": "CVE-2023-4834"
    }
  ]
}
```

## [vde-2024-042](https://vulnerability.circl.lu/vuln/vde-2024-042)

```json
{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "text": "Several Red Lion Europe products are vulnerable to a possible race condition vulnerability in OpenSSH named \"regreSSHion\".",
        "title": "Summary"
      },
      {
        "category": "description",
        "text": "Possible full system compromise where an attacker can execute arbitrary code with the highest privileges.",
        "title": "Impact"
      },
      {
        "category": "description",
        "text": "Prevent all access to the sshd daemon listening on port 22.",
        "title": "Mitigation"
      },
      {
        "category": "description",
        "text": "Update to latest firmware:\n\n2.16.1 for mbCONNECT24/mymbCONNECT24\n8.2.0 for mbNET/mbNET.rokey",
        "title": "Remediation"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "security-team@mbconnectline.de",
      "name": "MB connect line GmbH",
      "namespace": "https://mbconnectline.com"
    },
    "references": [
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for MB connect line GmbH",
        "url": "https://certvde.com/en/advisories/vendor/mbconnectline/"
      },
      {
        "category": "self",
        "summary": "VDE-2024-042: MB connect line: Multiple products are vulnerable to regreSSHion - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2024-042/"
      },
      {
        "category": "self",
        "summary": "VDE-2024-042: MB connect line: Multiple products are vulnerable to regreSSHion - CSAF",
        "url": "https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2023/vde-2024-042.json"
      }
    ],
    "title": "MB connect line: Multiple products are vulnerable to regreSSHion",
    "tracking": {
      "aliases": [
        "VDE-2024-042"
      ],
      "current_release_date": "2023-08-17T12:00:00.000Z",
      "generator": {
        "date": "2025-06-12T08:19:54.167Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.27"
        }
      },
      "id": "VDE-2024-042",
      "initial_release_date": "2023-08-17T12:00:00.000Z",
      "revision_history": [
        {
          "date": "2023-08-17T12:00:00.000Z",
          "number": "1.0.0",
          "summary": "Initial revision."
        }
      ],
      "status": "final",
      "version": "1.0.0"
    }
  },
  "product_tree": {
    "branches": [
      {
        "name": "Red Lion Europe",
        "category": "vendor",
        "branches": [
          {
            "name": "Software",
            "category": "product_family",
            "branches": [
              {
                "name": "mbCONNECT24",
                "category": "product_name",
                "branches": [
                  {
                    "name": "<2.16.1",
                    "category": "product_version_range",
                    "product": {
                      "name": "mbCONNECT24 <2.16.1",
                      "product_id": "CSAFPID-51001"
                    }
                  },
                  {
                    "name": "2.16.1",
                    "category": "product_version",
                    "product": {
                      "name": "mbCONNECT24 2.16.1",
                      "product_id": "CSAFPID-52001"
                    }
                  }
                ]
              },
              {
                "name": "mbNET",
                "category": "product_name",
                "branches": [
                  {
                    "name": "8.0.0<8.2.0",
                    "category": "product_version_range",
                    "product": {
                      "name": "mbNET 8.0.0<8.2.0",
                      "product_id": "CSAFPID-51002"
                    }
                  },
                  {
                    "name": "8.2.0",
                    "category": "product_version",
                    "product": {
                      "name": "mbNET 8.2.0",
                      "product_id": "CSAFPID-52002"
                    }
                  }
                ]
              },
              {
                "name": "mbNET.rokey",
                "category": "product_name",
                "branches": [
                  {
                    "name": "8.0.0<8.2.0",
                    "category": "product_version_range",
                    "product": {
                      "name": "mbNET.rokey 8.0.0<8.2.0",
                      "product_id": "CSAFPID-51003"
                    }
                  },
                  {
                    "name": "8.2.0",
                    "category": "product_version",
                    "product": {
                      "name": "mbNET.rokey 8.2.0",
                      "product_id": "CSAFPID-52003"
                    }
                  }
                ]
              },
              {
                "name": "mymbCONNECT24",
                "category": "product_name",
                "branches": [
                  {
                    "name": "<2.16.1",
                    "category": "product_version_range",
                    "product": {
                      "name": "mymbCONNECT24 <2.16.1",
                      "product_id": "CSAFPID-51004"
                    }
                  },
                  {
                    "name": "2.16.1",
                    "category": "product_version",
                    "product": {
                      "name": "mymbCONNECT24 2.16.1",
                      "product_id": "CSAFPID-52004"
                    }
                  }
                ]
              }
            ]
          }
        ]
      },
      {
        "name": "MB connect line",
        "category": "vendor",
        "branches": [
          {
            "name": "Software",
            "category": "product_family",
            "branches": [
              {
                "name": "mbCONNECT24",
                "category": "product_name",
                "branches": [
                  {
                    "name": "<2.16.1",
                    "category": "product_version_range",
                    "product": {
                      "name": "mbCONNECT24 <2.16.1",
                      "product_id": "CSAFPID-51005"
                    }
                  },
                  {
                    "name": "2.16.1",
                    "category": "product_version",
                    "product": {
                      "name": "mbCONNECT24 2.16.1",
                      "product_id": "CSAFPID-52005"
                    }
                  }
                ]
              },
              {
                "name": "mbNET",
                "category": "product_name",
                "branches": [
                  {
                    "name": "8.0.0<8.2.0",
                    "category": "product_version_range",
                    "product": {
                      "name": "mbNET 8.0.0<8.2.0",
                      "product_id": "CSAFPID-51006"
                    }
                  },
                  {
                    "name": "8.2.0",
                    "category": "product_version",
                    "product": {
                      "name": "mbNET 8.2.0",
                      "product_id": "CSAFPID-52006"
                    }
                  }
                ]
              },
              {
                "name": "mbNET.rokey",
                "category": "product_name",
                "branches": [
                  {
                    "name": "8.0.0<8.2.0",
                    "category": "product_version_range",
                    "product": {
                      "name": "mbNET.rokey 8.0.0<8.2.0",
                      "product_id": "CSAFPID-51007"
                    }
                  },
                  {
                    "name": "8.2.0",
                    "category": "product_version",
                    "product": {
                      "name": "mbNET.rokey 8.2.0",
                      "product_id": "CSAFPID-52007"
                    }
                  }
                ]
              },
              {
                "name": "mymbCONNECT24",
                "category": "product_name",
                "branches": [
                  {
                    "name": "<2.16.1",
                    "category": "product_version_range",
                    "product": {
                      "name": "mymbCONNECT24 <2.16.1",
                      "product_id": "CSAFPID-51008"
                    }
                  },
                  {
                    "name": "2.16.1",
                    "category": "product_version",
                    "product": {
                      "name": "mymbCONNECT24 2.16.1",
                      "product_id": "CSAFPID-52008"
                    }
                  }
                ]
              }
            ]
          }
        ]
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "product_ids": [
          "CSAFPID-51001",
          "CSAFPID-51002",
          "CSAFPID-51003",
          "CSAFPID-51004",
          "CSAFPID-51005",
          "CSAFPID-51006",
          "CSAFPID-51007",
          "CSAFPID-51008"
        ],
        "summary": "Affected products "
      },
      {
        "group_id": "CSAFGID-0002",
        "summary": "Fixed products",
        "product_ids": [
          "CSAFPID-52001",
          "CSAFPID-52002",
          "CSAFPID-52003",
          "CSAFPID-52004",
          "CSAFPID-52005",
          "CSAFPID-52006",
          "CSAFPID-52007",
          "CSAFPID-52008"
        ]
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2024-6387",
      "cwe": {
        "id": "CWE-362",
        "name": "Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')"
      },
      "notes": [
        {
          "category": "description",
          "text": "A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002",
          "CSAFPID-52003",
          "CSAFPID-52004",
          "CSAFPID-52005",
          "CSAFPID-52006",
          "CSAFPID-52007",
          "CSAFPID-52008"
        ],
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002",
          "CSAFPID-51003",
          "CSAFPID-51004",
          "CSAFPID-51005",
          "CSAFPID-51006",
          "CSAFPID-51007",
          "CSAFPID-51008"
        ]
      },
      "remediations": [
        {
          "category": "mitigation",
          "details": "Prevent all access to the sshd daemon listening on port 22.",
          "group_ids": [
            "CSAFGID-0001"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to latest firmware:\n\n2.16.1 for mbCONNECT24/mymbCONNECT24\n8.2.0 for mbNET/mbNET.rokey",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 8.1,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 8.1,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002",
            "CSAFPID-51003",
            "CSAFPID-51004",
            "CSAFPID-51005",
            "CSAFPID-51006",
            "CSAFPID-51007",
            "CSAFPID-51008"
          ]
        }
      ],
      "title": "CVE-2024-6387"
    }
  ]
}
```

## [vde-2023-012](https://vulnerability.circl.lu/vuln/vde-2023-012)

```json
{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "text": "A stored XXS vulnerability has been found in mbNET and mbNET/.rokey in all versions before 7.3.2.",
        "title": "Summary"
      },
      {
        "category": "description",
        "text": "A remote, authenticated attacker can fully compromise the browser session of all users accessing the devices web interface.",
        "title": "Impact"
      },
      {
        "category": "description",
        "text": "Update to 7.3.2",
        "title": "Remediation"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "security-team@mbconnectline.de",
      "name": "MB connect line GmbH",
      "namespace": "https://mbconnectline.com"
    },
    "references": [
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for MB connect line GmbH",
        "url": "https://certvde.com/en/advisories/vendor/mbconnectline/"
      },
      {
        "category": "self",
        "summary": "VDE-2023-012: MB connect line: Cross-site Scripting vulnerability in mbNET/mbNET.rokey - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2023-012/"
      },
      {
        "category": "self",
        "summary": "VDE-2023-012: MB connect line: Cross-site Scripting vulnerability in mbNET/mbNET.rokey - CSAF",
        "url": "https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2023/vde-2023-012.json"
      }
    ],
    "title": "MB connect line: Cross-site Scripting vulnerability in mbNET/mbNET.rokey",
    "tracking": {
      "aliases": [
        "VDE-2023-012"
      ],
      "current_release_date": "2023-08-17T12:00:00.000Z",
      "generator": {
        "date": "2025-06-05T07:56:19.766Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.27"
        }
      },
      "id": "VDE-2023-012",
      "initial_release_date": "2023-08-17T12:00:00.000Z",
      "revision_history": [
        {
          "date": "2023-08-17T12:00:00.000Z",
          "number": "1",
          "summary": "Initial revision."
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "name": "MB connect line",
        "category": "vendor",
        "branches": [
          {
            "name": "Software",
            "category": "product_family",
            "branches": [
              {
                "name": "mbNET",
                "category": "product_name",
                "branches": [
                  {
                    "name": "<7.3.2",
                    "category": "product_version_range",
                    "product": {
                      "name": "mbNET <7.3.2",
                      "product_id": "CSAFPID-51001"
                    }
                  },
                  {
                    "name": "7.3.2",
                    "category": "product_version",
                    "product": {
                      "name": "mbNET 7.3.2",
                      "product_id": "CSAFPID-52001"
                    }
                  }
                ]
              },
              {
                "name": "mbNET.rokey",
                "category": "product_name",
                "branches": [
                  {
                    "name": "<7.3.2",
                    "category": "product_version_range",
                    "product": {
                      "name": "mbNET.rokey <7.3.2",
                      "product_id": "CSAFPID-51002"
                    }
                  },
                  {
                    "name": "7.3.2",
                    "category": "product_version",
                    "product": {
                      "name": "mbNET.rokey 7.3.2",
                      "product_id": "CSAFPID-52002"
                    }
                  }
                ]
              }
            ]
          }
        ]
      },
      {
        "name": "Red Lion Europe",
        "category": "vendor",
        "branches": [
          {
            "name": "Software",
            "category": "product_family",
            "branches": [
              {
                "name": "mbNET",
                "category": "product_name",
                "branches": [
                  {
                    "name": "<7.3.2",
                    "category": "product_version_range",
                    "product": {
                      "name": "mbNET <7.3.2",
                      "product_id": "CSAFPID-51003"
                    }
                  },
                  {
                    "name": "7.3.2",
                    "category": "product_version",
                    "product": {
                      "name": "mbNET 7.3.2",
                      "product_id": "CSAFPID-52003"
                    }
                  }
                ]
              },
              {
                "name": "mbNET.rokey",
                "category": "product_name",
                "branches": [
                  {
                    "name": "<7.3.2",
                    "category": "product_version_range",
                    "product": {
                      "name": "mbNET.rokey <7.3.2",
                      "product_id": "CSAFPID-51004"
                    }
                  },
                  {
                    "name": "7.3.2",
                    "category": "product_version",
                    "product": {
                      "name": "mbNET.rokey 7.3.2",
                      "product_id": "CSAFPID-52004"
                    }
                  }
                ]
              }
            ]
          }
        ]
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "product_ids": [
          "CSAFPID-51001",
          "CSAFPID-51002",
          "CSAFPID-51003",
          "CSAFPID-51004"
        ],
        "summary": "Affected products "
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-34412",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"
      },
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability in Red Lion Europe mbNET/mbNET.rokey and Helmholz REX 200 and REX 250 devices with firmware lower 7.3.2 allows an\nauthenticated remote attacker with high privileges to inject malicious HTML or JavaScript code (XSS).",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002",
          "CSAFPID-52003",
          "CSAFPID-52004"
        ],
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002",
          "CSAFPID-51003",
          "CSAFPID-51004"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to 7.3.2",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "environmentalScore": 4.8,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "LOW",
            "privilegesRequired": "HIGH",
            "scope": "CHANGED",
            "temporalScore": 4.8,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002",
            "CSAFPID-51003",
            "CSAFPID-51004"
          ]
        }
      ],
      "title": "CVE-2023-34412"
    }
  ]
}
```

## [vde-2022-011](https://vulnerability.circl.lu/vuln/vde-2022-011)

```json
{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "tracking": {
      "generator": {
        "date": "2025-03-21T11:47:01.298Z",
        "engine": {
          "version": "2.5.21",
          "name": "Secvisogram"
        }
      },
      "id": "VDE-2022-011",
      "version": "1",
      "status": "final",
      "aliases": [
        "VDE-2022-011"
      ],
      "revision_history": [
        {
          "number": "1",
          "summary": "initial revision",
          "date": "2022-09-07T12:50:00.000Z"
        }
      ],
      "current_release_date": "2022-09-07T12:50:00.000Z",
      "initial_release_date": "2022-09-07T12:50:00.000Z"
    },
    "lang": "en-GB",
    "title": "MB connect line: Unauthenticated user enumeration in mbCONNECT24 and mymbCONNECT24",
    "acknowledgments": [
      {
        "organization": "CERTVDE",
        "urls": [
          "https://certvde.com"
        ],
        "summary": "coordination"
      },
      {
        "organization": "SySS GmBH",
        "summary": "reporting",
        "urls": [
          "https://www.syss.de"
        ]
      },
      {
        "organization": "Helmholz",
        "summary": "reporting",
        "urls": [
          "https://www.helmholz.de"
        ]
      }
    ],
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "notes": [
      {
        "category": "summary",
        "title": "Summary",
        "text": "An issue was discovered in the mymbCONNECT24 and mbCONNECT24 software in all versions through V2.11.2."
      },
      {
        "category": "description",
        "title": "Impact",
        "text": "A remote, unauthenticated attacker can enumerate valid users with a timing attack against the webserver."
      },
      {
        "category": "description",
        "title": "Remediation",
        "text": "Update to Version 2.12.1"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "security-team@mbconnectline.de",
      "name": "MB connect line GmbH",
      "namespace": "https://mbconnectline.com"
    },
    "references": [
      {
        "summary": "VDE-2022-011: MB connect line: Unauthenticated user enumeration in mbCONNECT24 and mymbCONNECT24 - HTML",
        "url": "https://certvde.com/de/advisories/VDE-2022-011/",
        "category": "self"
      },
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for ",
        "url": "https://certvde.com/en/advisories/vendor/mbconnectline/"
      },
      {
        "summary": "VDE-2022-011: MB connect line: Unauthenticated user enumeration in mbCONNECT24 and mymbCONNECT24 - CSAF",
        "url": "https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2022/vde-2022-011.json",
        "category": "self"
      }
    ]
  },
  "product_tree": {
    "branches": [
      {
        "category": "vendor",
        "name": "MB connect line GmbH",
        "branches": [
          {
            "category": "product_family",
            "name": "Hardware",
            "branches": [
              {
                "category": "product_name",
                "name": "mbCONNECT24",
                "product": {
                  "name": "mbCONNECT24",
                  "product_id": "CSAFPID-11001"
                }
              },
              {
                "category": "product_name",
                "name": "mymbCONNECT24",
                "product": {
                  "name": "mymbCONNECT24",
                  "product_id": "CSAFPID-11002"
                }
              }
            ]
          },
          {
            "category": "product_family",
            "name": "Firmware",
            "branches": [
              {
                "category": "product_version_range",
                "name": "<=2.11.2",
                "product": {
                  "name": "Firmware <=2.11.2",
                  "product_id": "CSAFPID-21001"
                }
              },
              {
                "category": "product_version",
                "name": "2.12.1",
                "product": {
                  "name": "Firmware 2.12.1",
                  "product_id": "CSAFPID-22001"
                }
              }
            ]
          }
        ]
      }
    ],
    "relationships": [
      {
        "category": "installed_on",
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11001",
        "full_product_name": {
          "name": "Firmware <=2.11.2 installed on mbCONNECT24",
          "product_id": "CSAFPID-31001"
        }
      },
      {
        "category": "installed_on",
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11001",
        "full_product_name": {
          "name": "Firmware 2.12.1 installed on mbCONNECT24",
          "product_id": "CSAFPID-32001"
        }
      },
      {
        "category": "installed_on",
        "product_reference": "CSAFPID-21001",
        "relates_to_product_reference": "CSAFPID-11002",
        "full_product_name": {
          "name": "Firmware <=2.11.2 installed on mymbCONNECT24",
          "product_id": "CSAFPID-31002"
        }
      },
      {
        "category": "installed_on",
        "product_reference": "CSAFPID-22001",
        "relates_to_product_reference": "CSAFPID-11002",
        "full_product_name": {
          "name": "Firmware 2.12.1 installed on mymbCONNECT24",
          "product_id": "CSAFPID-32002"
        }
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "summary": "affected products",
        "product_ids": [
          "CSAFPID-31001",
          "CSAFPID-31002"
        ]
      },
      {
        "group_id": "CSAFGID-0002",
        "summary": "fixed products",
        "product_ids": [
          "CSAFPID-32001",
          "CSAFPID-32002"
        ]
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-22520",
      "title": "CVE-2022-22520",
      "product_status": {
        "known_affected": [
          "CSAFPID-31001",
          "CSAFPID-31002"
        ],
        "fixed": [
          "CSAFPID-32001",
          "CSAFPID-32002"
        ]
      },
      "scores": [
        {
          "cvss_v3": {
            "attackVector": "NETWORK",
            "attackComplexity": "LOW",
            "privilegesRequired": "NONE",
            "userInteraction": "NONE",
            "scope": "UNCHANGED",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "availabilityImpact": "NONE",
            "version": "3.1",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "temporalScore": 5.3,
            "temporalSeverity": "MEDIUM",
            "environmentalScore": 5.3,
            "environmentalSeverity": "MEDIUM"
          },
          "products": [
            "CSAFPID-31001",
            "CSAFPID-31002"
          ]
        }
      ],
      "notes": [
        {
          "category": "summary",
          "text": "A remote, unauthenticated attacker can enumerate valid users by sending specific requests to the webservice of MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2."
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to Version 2.12.1",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "cwe": {
        "id": "CWE-204",
        "name": "Observable Response Discrepancy"
      }
    }
  ]
}
```

## [vde-2021-003](https://vulnerability.circl.lu/vuln/vde-2021-003)

```json
{
  "document": {
    "acknowledgments": [
      {
        "organization": "CERT@VDE",
        "summary": "coordination",
        "urls": [
          "https://certvde.com"
        ]
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-GB",
    "notes": [
      {
        "category": "summary",
        "text": "Multiple vulnerabilities have been found in mymbCONNECT24 and mbCONNECT24.\nUpdate A, 2022-09-07:\n\nAffected Products: updated affected versions due to incomplete fixes of some CVEs. See Solution for details.\nSolution: updated version information.\nSolution: Added Fix for CVE-2020-35561.\nSolution: Added MFA remark for CVE-2020-35565.",
        "title": "Summary"
      },
      {
        "category": "description",
        "text": "please see cve id entries",
        "title": "Impact"
      },
      {
        "category": "description",
        "text": "CVE-2020-12528, CVE-2020-12529, CVE-2020-35560,\nCVE-2020-12530, CVE-2020-35563, CVE-2020-35564,\nCVE-2020-35569, CVE-2020-35559,  Update to version >= 2.7.1\n\nCVE-2020-10384: Update to version 2.6.2 to close any known way to get to www-data.\nNote: This issue only exists up until version 2.6.1 and has already been addressed in >= 2.6.2\n\nCVE-2020-35567: None\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update.\n\nCVE-2020-35565: None\nMitigation: Activate bruteforce detection via Security → Fail2Ban → WebLogin\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update. To further increase the security level of your account enable MFA.\n\nCVE-2020-35561: Update to version 2.12.1\n\nUpdate A, 2022-09-07:\n\nCVE-2020-35557, CVE-2020-35570, CVE-2020-35558,\nCVE-2020-35566, CVE-2020-12527, CVE-2020-35568: Update to version 2.12.1",
        "title": "Remediation"
      }
    ],
    "publisher": {
      "contact_details": "security-team@mbconnectline.de",
      "name": "MB connect line GmbH",
      "namespace": "https://mbconnectline.com",
      "category": "vendor"
    },
    "references": [
      {
        "category": "self",
        "summary": "VDE-2021-003: MB connect line: Multiple vulnerabilites in mymbCONNECT24 and mbCONNECT24 (Update A) - HTML",
        "url": "https://certvde.com/en/advisories/VDE-2021-003/"
      },
      {
        "category": "self",
        "summary": "VDE-2021-003: MB connect line: Multiple vulnerabilites in mymbCONNECT24 and mbCONNECT24 (Update A) - CSAF",
        "url": "https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2022/vde-2021-003.json"
      },
      {
        "category": "external",
        "summary": "MB connect line PSIRT",
        "url": "https://mbconnectline.com/security/"
      },
      {
        "category": "external",
        "summary": "CERT@VDE Security Advisories for MB connect line GmbH",
        "url": "https://certvde.com/en/advisories/vendor/mbconnectline/"
      }
    ],
    "title": "MB connect line: Multiple vulnerabilites in mymbCONNECT24 and mbCONNECT24 (Update A)",
    "tracking": {
      "aliases": [
        "VDE-2021-003"
      ],
      "current_release_date": "2022-09-07T10:46:00.000Z",
      "generator": {
        "date": "2025-05-05T09:20:59.210Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.24"
        }
      },
      "id": "VDE-2021-003",
      "initial_release_date": "2022-09-07T10:46:00.000Z",
      "revision_history": [
        {
          "date": "2022-09-07T10:46:00.000Z",
          "number": "1",
          "summary": "Initial revision."
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "name": "MB connect line",
        "category": "vendor",
        "branches": [
          {
            "name": "Software",
            "category": "product_family",
            "branches": [
              {
                "name": "mbCONNECT24",
                "category": "product_name",
                "branches": [
                  {
                    "name": "<=2.11.2",
                    "category": "product_version_range",
                    "product": {
                      "name": "mbCONNECT24 <= 2.11.2",
                      "product_id": "CSAFPID-51001"
                    }
                  },
                  {
                    "name": "2.12.1",
                    "category": "product_version",
                    "product": {
                      "name": "mbCONNECT24 2.12.1",
                      "product_id": "CSAFPID-52001"
                    }
                  }
                ]
              },
              {
                "name": "mymbCONNECT24",
                "category": "product_name",
                "branches": [
                  {
                    "name": "<=2.11.2",
                    "category": "product_version_range",
                    "product": {
                      "name": "mymbCONNECT24 <= 2.11.2",
                      "product_id": "CSAFPID-51002"
                    }
                  },
                  {
                    "name": "2.12.1",
                    "category": "product_version",
                    "product": {
                      "name": "mymbCONNECT24 2.12.1",
                      "product_id": "CSAFPID-52002"
                    }
                  }
                ]
              }
            ]
          }
        ]
      }
    ],
    "product_groups": [
      {
        "group_id": "CSAFGID-0001",
        "product_ids": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ],
        "summary": "Affected products."
      },
      {
        "group_id": "CSAFGID-0002",
        "product_ids": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ],
        "summary": "Fixed products."
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-12530",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. There is an XSS issue in the redirect.php allowing an attacker to inject code via a get parameter.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ],
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "CVE-2020-12528, CVE-2020-12529, CVE-2020-35560,\nCVE-2020-12530, CVE-2020-35563, CVE-2020-35564,\nCVE-2020-35569, CVE-2020-35559,  Update to version >= 2.7.1\n\nCVE-2020-10384: Update to version 2.6.2 to close any known way to get to www-data.\nNote: This issue only exists up until version 2.6.1 and has already been addressed in >= 2.6.2\n\nCVE-2020-35567: None\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update.\n\nCVE-2020-35565: None\nMitigation: Activate bruteforce detection via Security → Fail2Ban → WebLogin\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update. To further increase the security level of your account enable MFA.\n\nCVE-2020-35561: Update to version 2.12.1\n\nUpdate A, 2022-09-07:\n\nCVE-2020-35557, CVE-2020-35570, CVE-2020-35558,\nCVE-2020-35566, CVE-2020-12527, CVE-2020-35568: Update to version 2.12.1",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "environmentalScore": 6.1,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "temporalScore": 6.1,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ],
      "title": "CVE-2020-12530"
    },
    {
      "cve": "CVE-2020-12528",
      "cwe": {
        "id": "CWE-269",
        "name": "Improper Privilege Management"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. Improper use of access validation allows a logged in user to kill web2go sessions in the account he should not have access to.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ],
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "CVE-2020-12528, CVE-2020-12529, CVE-2020-35560,\nCVE-2020-12530, CVE-2020-35563, CVE-2020-35564,\nCVE-2020-35569, CVE-2020-35559,  Update to version >= 2.7.1\n\nCVE-2020-10384: Update to version 2.6.2 to close any known way to get to www-data.\nNote: This issue only exists up until version 2.6.1 and has already been addressed in >= 2.6.2\n\nCVE-2020-35567: None\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update.\n\nCVE-2020-35565: None\nMitigation: Activate bruteforce detection via Security → Fail2Ban → WebLogin\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update. To further increase the security level of your account enable MFA.\n\nCVE-2020-35561: Update to version 2.12.1\n\nUpdate A, 2022-09-07:\n\nCVE-2020-35557, CVE-2020-35570, CVE-2020-35558,\nCVE-2020-35566, CVE-2020-12527, CVE-2020-35568: Update to version 2.12.1",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.7,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "environmentalScore": 7.7,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "temporalScore": 7.7,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ],
      "title": "CVE-2020-12528"
    },
    {
      "cve": "CVE-2020-12529",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2 There is a SSRF in the LDAP access check, allowing an attacker to scan for open ports.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ],
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "CVE-2020-12528, CVE-2020-12529, CVE-2020-35560,\nCVE-2020-12530, CVE-2020-35563, CVE-2020-35564,\nCVE-2020-35569, CVE-2020-35559,  Update to version >= 2.7.1\n\nCVE-2020-10384: Update to version 2.6.2 to close any known way to get to www-data.\nNote: This issue only exists up until version 2.6.1 and has already been addressed in >= 2.6.2\n\nCVE-2020-35567: None\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update.\n\nCVE-2020-35565: None\nMitigation: Activate bruteforce detection via Security → Fail2Ban → WebLogin\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update. To further increase the security level of your account enable MFA.\n\nCVE-2020-35561: Update to version 2.12.1\n\nUpdate A, 2022-09-07:\n\nCVE-2020-35557, CVE-2020-35570, CVE-2020-35558,\nCVE-2020-35566, CVE-2020-12527, CVE-2020-35568: Update to version 2.12.1",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "environmentalScore": 5.3,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 5.3,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ],
      "title": "CVE-2020-12529"
    },
    {
      "cve": "CVE-2020-12527",
      "cwe": {
        "id": "CWE-269",
        "name": "Improper Privilege Management"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. Improper access validation allows a logged in user to shutdown or reboot devices in his account without having corresponding permissions.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ],
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "CVE-2020-12528, CVE-2020-12529, CVE-2020-35560,\nCVE-2020-12530, CVE-2020-35563, CVE-2020-35564,\nCVE-2020-35569, CVE-2020-35559,  Update to version >= 2.7.1\n\nCVE-2020-10384: Update to version 2.6.2 to close any known way to get to www-data.\nNote: This issue only exists up until version 2.6.1 and has already been addressed in >= 2.6.2\n\nCVE-2020-35567: None\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update.\n\nCVE-2020-35565: None\nMitigation: Activate bruteforce detection via Security → Fail2Ban → WebLogin\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update. To further increase the security level of your account enable MFA.\n\nCVE-2020-35561: Update to version 2.12.1\n\nUpdate A, 2022-09-07:\n\nCVE-2020-35557, CVE-2020-35570, CVE-2020-35558,\nCVE-2020-35566, CVE-2020-12527, CVE-2020-35568: Update to version 2.12.1",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "environmentalScore": 6.5,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 6.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ],
      "title": "CVE-2020-12527"
    },
    {
      "cve": "CVE-2020-10384",
      "cwe": {
        "id": "CWE-269",
        "name": "Improper Privilege Management"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.6.1. There is a local privilege escalation from the www-data account to the root account.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ],
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "CVE-2020-12528, CVE-2020-12529, CVE-2020-35560,\nCVE-2020-12530, CVE-2020-35563, CVE-2020-35564,\nCVE-2020-35569, CVE-2020-35559,  Update to version >= 2.7.1\n\nCVE-2020-10384: Update to version 2.6.2 to close any known way to get to www-data.\nNote: This issue only exists up until version 2.6.1 and has already been addressed in >= 2.6.2\n\nCVE-2020-35567: None\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update.\n\nCVE-2020-35565: None\nMitigation: Activate bruteforce detection via Security → Fail2Ban → WebLogin\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update. To further increase the security level of your account enable MFA.\n\nCVE-2020-35561: Update to version 2.12.1\n\nUpdate A, 2022-09-07:\n\nCVE-2020-35557, CVE-2020-35570, CVE-2020-35558,\nCVE-2020-35566, CVE-2020-12527, CVE-2020-35568: Update to version 2.12.1",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.8,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 7.8,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ],
      "title": "CVE-2020-10384"
    },
    {
      "cve": "CVE-2020-35561",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. There is an SSRF in the HA module allowing an unauthenticated attacker to scan for open ports.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ],
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "CVE-2020-12528, CVE-2020-12529, CVE-2020-35560,\nCVE-2020-12530, CVE-2020-35563, CVE-2020-35564,\nCVE-2020-35569, CVE-2020-35559,  Update to version >= 2.7.1\n\nCVE-2020-10384: Update to version 2.6.2 to close any known way to get to www-data.\nNote: This issue only exists up until version 2.6.1 and has already been addressed in >= 2.6.2\n\nCVE-2020-35567: None\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update.\n\nCVE-2020-35565: None\nMitigation: Activate bruteforce detection via Security → Fail2Ban → WebLogin\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update. To further increase the security level of your account enable MFA.\n\nCVE-2020-35561: Update to version 2.12.1\n\nUpdate A, 2022-09-07:\n\nCVE-2020-35557, CVE-2020-35570, CVE-2020-35558,\nCVE-2020-35566, CVE-2020-12527, CVE-2020-35568: Update to version 2.12.1",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "environmentalScore": 5.3,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 5.3,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ],
      "title": "CVE-2020-35561"
    },
    {
      "cve": "CVE-2020-35565",
      "cwe": {
        "id": "CWE-307",
        "name": "Improper Restriction of Excessive Authentication Attempts"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. The login pages bruteforce detection is disabled by default.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ],
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "CVE-2020-12528, CVE-2020-12529, CVE-2020-35560,\nCVE-2020-12530, CVE-2020-35563, CVE-2020-35564,\nCVE-2020-35569, CVE-2020-35559,  Update to version >= 2.7.1\n\nCVE-2020-10384: Update to version 2.6.2 to close any known way to get to www-data.\nNote: This issue only exists up until version 2.6.1 and has already been addressed in >= 2.6.2\n\nCVE-2020-35567: None\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update.\n\nCVE-2020-35565: None\nMitigation: Activate bruteforce detection via Security → Fail2Ban → WebLogin\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update. To further increase the security level of your account enable MFA.\n\nCVE-2020-35561: Update to version 2.12.1\n\nUpdate A, 2022-09-07:\n\nCVE-2020-35557, CVE-2020-35570, CVE-2020-35558,\nCVE-2020-35566, CVE-2020-12527, CVE-2020-35568: Update to version 2.12.1",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 9.8,
            "environmentalSeverity": "CRITICAL",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 9.8,
            "temporalSeverity": "CRITICAL",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ],
      "title": "CVE-2020-35565"
    },
    {
      "cve": "CVE-2020-35567",
      "cwe": {
        "id": "CWE-798",
        "name": "Use of Hard-coded Credentials"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. The software uses a secure password for database access, but this password is shared across instances.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ],
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "CVE-2020-12528, CVE-2020-12529, CVE-2020-35560,\nCVE-2020-12530, CVE-2020-35563, CVE-2020-35564,\nCVE-2020-35569, CVE-2020-35559,  Update to version >= 2.7.1\n\nCVE-2020-10384: Update to version 2.6.2 to close any known way to get to www-data.\nNote: This issue only exists up until version 2.6.1 and has already been addressed in >= 2.6.2\n\nCVE-2020-35567: None\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update.\n\nCVE-2020-35565: None\nMitigation: Activate bruteforce detection via Security → Fail2Ban → WebLogin\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update. To further increase the security level of your account enable MFA.\n\nCVE-2020-35561: Update to version 2.12.1\n\nUpdate A, 2022-09-07:\n\nCVE-2020-35557, CVE-2020-35570, CVE-2020-35558,\nCVE-2020-35566, CVE-2020-12527, CVE-2020-35568: Update to version 2.12.1",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.8,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 7.8,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ],
      "title": "CVE-2020-35567"
    },
    {
      "cve": "CVE-2020-35568",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. An incomplete filter applied to a database response allows an authenticated attacker to gain non-public information about other users and devices in the account.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ],
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "CVE-2020-12528, CVE-2020-12529, CVE-2020-35560,\nCVE-2020-12530, CVE-2020-35563, CVE-2020-35564,\nCVE-2020-35569, CVE-2020-35559,  Update to version >= 2.7.1\n\nCVE-2020-10384: Update to version 2.6.2 to close any known way to get to www-data.\nNote: This issue only exists up until version 2.6.1 and has already been addressed in >= 2.6.2\n\nCVE-2020-35567: None\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update.\n\nCVE-2020-35565: None\nMitigation: Activate bruteforce detection via Security → Fail2Ban → WebLogin\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update. To further increase the security level of your account enable MFA.\n\nCVE-2020-35561: Update to version 2.12.1\n\nUpdate A, 2022-09-07:\n\nCVE-2020-35557, CVE-2020-35570, CVE-2020-35558,\nCVE-2020-35566, CVE-2020-12527, CVE-2020-35568: Update to version 2.12.1",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "environmentalScore": 4.3,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 4.3,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ],
      "title": "CVE-2020-35568"
    },
    {
      "cve": "CVE-2020-35559",
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an unused function that allows an authenticated attacker to use up all available IPs of an account and thus not allow creation of new devices and users.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ],
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "CVE-2020-12528, CVE-2020-12529, CVE-2020-35560,\nCVE-2020-12530, CVE-2020-35563, CVE-2020-35564,\nCVE-2020-35569, CVE-2020-35559,  Update to version >= 2.7.1\n\nCVE-2020-10384: Update to version 2.6.2 to close any known way to get to www-data.\nNote: This issue only exists up until version 2.6.1 and has already been addressed in >= 2.6.2\n\nCVE-2020-35567: None\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update.\n\nCVE-2020-35565: None\nMitigation: Activate bruteforce detection via Security → Fail2Ban → WebLogin\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update. To further increase the security level of your account enable MFA.\n\nCVE-2020-35561: Update to version 2.12.1\n\nUpdate A, 2022-09-07:\n\nCVE-2020-35557, CVE-2020-35570, CVE-2020-35558,\nCVE-2020-35566, CVE-2020-12527, CVE-2020-35568: Update to version 2.12.1",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "environmentalScore": 4.3,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 4.3,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ],
      "title": "CVE-2020-35559"
    },
    {
      "cve": "CVE-2020-35566",
      "cwe": {
        "id": "CWE-706",
        "name": "Use of Incorrectly-Resolved Name or Reference"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. An attacker can read arbitrary JSON files via Local File Inclusion.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ],
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "CVE-2020-12528, CVE-2020-12529, CVE-2020-35560,\nCVE-2020-12530, CVE-2020-35563, CVE-2020-35564,\nCVE-2020-35569, CVE-2020-35559,  Update to version >= 2.7.1\n\nCVE-2020-10384: Update to version 2.6.2 to close any known way to get to www-data.\nNote: This issue only exists up until version 2.6.1 and has already been addressed in >= 2.6.2\n\nCVE-2020-35567: None\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update.\n\nCVE-2020-35565: None\nMitigation: Activate bruteforce detection via Security → Fail2Ban → WebLogin\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update. To further increase the security level of your account enable MFA.\n\nCVE-2020-35561: Update to version 2.12.1\n\nUpdate A, 2022-09-07:\n\nCVE-2020-35557, CVE-2020-35570, CVE-2020-35558,\nCVE-2020-35566, CVE-2020-12527, CVE-2020-35568: Update to version 2.12.1",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "environmentalScore": 5.3,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 5.3,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ],
      "title": "CVE-2020-35566"
    },
    {
      "cve": "CVE-2020-35569",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is a self XSS issue with a crafted cookie in the login page.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ],
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "CVE-2020-12528, CVE-2020-12529, CVE-2020-35560,\nCVE-2020-12530, CVE-2020-35563, CVE-2020-35564,\nCVE-2020-35569, CVE-2020-35559,  Update to version >= 2.7.1\n\nCVE-2020-10384: Update to version 2.6.2 to close any known way to get to www-data.\nNote: This issue only exists up until version 2.6.1 and has already been addressed in >= 2.6.2\n\nCVE-2020-35567: None\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update.\n\nCVE-2020-35565: None\nMitigation: Activate bruteforce detection via Security → Fail2Ban → WebLogin\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update. To further increase the security level of your account enable MFA.\n\nCVE-2020-35561: Update to version 2.12.1\n\nUpdate A, 2022-09-07:\n\nCVE-2020-35557, CVE-2020-35570, CVE-2020-35558,\nCVE-2020-35566, CVE-2020-12527, CVE-2020-35568: Update to version 2.12.1",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "environmentalScore": 6.1,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "temporalScore": 6.1,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ],
      "title": "CVE-2020-35569"
    },
    {
      "cve": "CVE-2020-35564",
      "cwe": {
        "id": "CWE-74",
        "name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an outdated and unused component allowing for malicious user input of active code.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ],
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "CVE-2020-12528, CVE-2020-12529, CVE-2020-35560,\nCVE-2020-12530, CVE-2020-35563, CVE-2020-35564,\nCVE-2020-35569, CVE-2020-35559,  Update to version >= 2.7.1\n\nCVE-2020-10384: Update to version 2.6.2 to close any known way to get to www-data.\nNote: This issue only exists up until version 2.6.1 and has already been addressed in >= 2.6.2\n\nCVE-2020-35567: None\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update.\n\nCVE-2020-35565: None\nMitigation: Activate bruteforce detection via Security → Fail2Ban → WebLogin\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update. To further increase the security level of your account enable MFA.\n\nCVE-2020-35561: Update to version 2.12.1\n\nUpdate A, 2022-09-07:\n\nCVE-2020-35557, CVE-2020-35570, CVE-2020-35558,\nCVE-2020-35566, CVE-2020-12527, CVE-2020-35568: Update to version 2.12.1",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "environmentalScore": 7.5,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 7.5,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ],
      "title": "CVE-2020-35564"
    },
    {
      "cve": "CVE-2020-35563",
      "cwe": {
        "id": "CWE-79",
        "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an incomplete XSS filter allowing an attacker to inject crafted malicious code into the page.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ],
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "CVE-2020-12528, CVE-2020-12529, CVE-2020-35560,\nCVE-2020-12530, CVE-2020-35563, CVE-2020-35564,\nCVE-2020-35569, CVE-2020-35559,  Update to version >= 2.7.1\n\nCVE-2020-10384: Update to version 2.6.2 to close any known way to get to www-data.\nNote: This issue only exists up until version 2.6.1 and has already been addressed in >= 2.6.2\n\nCVE-2020-35567: None\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update.\n\nCVE-2020-35565: None\nMitigation: Activate bruteforce detection via Security → Fail2Ban → WebLogin\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update. To further increase the security level of your account enable MFA.\n\nCVE-2020-35561: Update to version 2.12.1\n\nUpdate A, 2022-09-07:\n\nCVE-2020-35557, CVE-2020-35570, CVE-2020-35558,\nCVE-2020-35566, CVE-2020-12527, CVE-2020-35568: Update to version 2.12.1",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "environmentalScore": 5.4,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "temporalScore": 5.4,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ],
      "title": "CVE-2020-35563"
    },
    {
      "cve": "CVE-2020-35560",
      "cwe": {
        "id": "CWE-601",
        "name": "URL Redirection to Untrusted Site ('Open Redirect')"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an unauthenticated open redirect in the redirect.php.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ],
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "CVE-2020-12528, CVE-2020-12529, CVE-2020-35560,\nCVE-2020-12530, CVE-2020-35563, CVE-2020-35564,\nCVE-2020-35569, CVE-2020-35559,  Update to version >= 2.7.1\n\nCVE-2020-10384: Update to version 2.6.2 to close any known way to get to www-data.\nNote: This issue only exists up until version 2.6.1 and has already been addressed in >= 2.6.2\n\nCVE-2020-35567: None\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update.\n\nCVE-2020-35565: None\nMitigation: Activate bruteforce detection via Security → Fail2Ban → WebLogin\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update. To further increase the security level of your account enable MFA.\n\nCVE-2020-35561: Update to version 2.12.1\n\nUpdate A, 2022-09-07:\n\nCVE-2020-35557, CVE-2020-35570, CVE-2020-35558,\nCVE-2020-35566, CVE-2020-12527, CVE-2020-35568: Update to version 2.12.1",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "environmentalScore": 6.1,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "temporalScore": 6.1,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ],
      "title": "CVE-2020-35560"
    },
    {
      "cve": "CVE-2020-35558",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual through 2.11.2. There is an SSRF in the in the MySQL access check, allowing an attacker to scan for open ports and gain some information about possible credentials.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ],
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "CVE-2020-12528, CVE-2020-12529, CVE-2020-35560,\nCVE-2020-12530, CVE-2020-35563, CVE-2020-35564,\nCVE-2020-35569, CVE-2020-35559,  Update to version >= 2.7.1\n\nCVE-2020-10384: Update to version 2.6.2 to close any known way to get to www-data.\nNote: This issue only exists up until version 2.6.1 and has already been addressed in >= 2.6.2\n\nCVE-2020-35567: None\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update.\n\nCVE-2020-35565: None\nMitigation: Activate bruteforce detection via Security → Fail2Ban → WebLogin\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update. To further increase the security level of your account enable MFA.\n\nCVE-2020-35561: Update to version 2.12.1\n\nUpdate A, 2022-09-07:\n\nCVE-2020-35557, CVE-2020-35570, CVE-2020-35558,\nCVE-2020-35566, CVE-2020-12527, CVE-2020-35568: Update to version 2.12.1",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 7.5,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 7.5,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ],
      "title": "CVE-2020-35558"
    },
    {
      "cve": "CVE-2020-35570",
      "cwe": {
        "id": "CWE-425",
        "name": "Direct Request ('Forced Browsing')"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual through 2.11.2. An unauthenticated attacker is able to access files (that should have been restricted) via forceful browsing.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ],
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "CVE-2020-12528, CVE-2020-12529, CVE-2020-35560,\nCVE-2020-12530, CVE-2020-35563, CVE-2020-35564,\nCVE-2020-35569, CVE-2020-35559,  Update to version >= 2.7.1\n\nCVE-2020-10384: Update to version 2.6.2 to close any known way to get to www-data.\nNote: This issue only exists up until version 2.6.1 and has already been addressed in >= 2.6.2\n\nCVE-2020-35567: None\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update.\n\nCVE-2020-35565: None\nMitigation: Activate bruteforce detection via Security → Fail2Ban → WebLogin\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update. To further increase the security level of your account enable MFA.\n\nCVE-2020-35561: Update to version 2.12.1\n\nUpdate A, 2022-09-07:\n\nCVE-2020-35557, CVE-2020-35570, CVE-2020-35558,\nCVE-2020-35566, CVE-2020-12527, CVE-2020-35568: Update to version 2.12.1",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "environmentalScore": 5.3,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "temporalScore": 5.3,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ],
      "title": "CVE-2020-35570"
    },
    {
      "cve": "CVE-2020-35557",
      "cwe": {
        "id": "CWE-269",
        "name": "Improper Privilege Management"
      },
      "notes": [
        {
          "category": "description",
          "text": "An issue in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 allows a logged in user to see devices in the account he should not have access to due to improper use of access validation.",
          "title": "Vulnerability Description"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-52001",
          "CSAFPID-52002"
        ],
        "known_affected": [
          "CSAFPID-51001",
          "CSAFPID-51002"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "CVE-2020-12528, CVE-2020-12529, CVE-2020-35560,\nCVE-2020-12530, CVE-2020-35563, CVE-2020-35564,\nCVE-2020-35569, CVE-2020-35559,  Update to version >= 2.7.1\n\nCVE-2020-10384: Update to version 2.6.2 to close any known way to get to www-data.\nNote: This issue only exists up until version 2.6.1 and has already been addressed in >= 2.6.2\n\nCVE-2020-35567: None\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update.\n\nCVE-2020-35565: None\nMitigation: Activate bruteforce detection via Security → Fail2Ban → WebLogin\nNote: A proper fix for the underlying issue will come with a future architectural core-system-update. To further increase the security level of your account enable MFA.\n\nCVE-2020-35561: Update to version 2.12.1\n\nUpdate A, 2022-09-07:\n\nCVE-2020-35557, CVE-2020-35570, CVE-2020-35558,\nCVE-2020-35566, CVE-2020-12527, CVE-2020-35568: Update to version 2.12.1",
          "group_ids": [
            "CSAFGID-0001"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 6.5,
            "environmentalSeverity": "MEDIUM",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 6.5,
            "temporalSeverity": "MEDIUM",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-51001",
            "CSAFPID-51002"
          ]
        }
      ],
      "title": "CVE-2020-35557"
    }
  ]
}
```