MB connect line mbCONNECT24, mymbCONNECT24

Risk Summary

Successful exploitation of these vulnerabilities could allow a remote attacker to gain unauthorized access to arbitrary information or allow remote code execution.

CVEs (18)

Remediations

• Additional details can be found on MB connect line's website.
• MB connect line recommends users update mymbCONNECT24 and mbCONNECT24 to Version 2.71 or higher to mitigate many of these vulnerabilities. A future release will include mitigations for the remaining vulnerabilities found in CVE-2020-35567, CVE-2020-35565, and CVE-2020-35561.
• CVE-2020-35561: Avoid vulnerable open ports on the LAN side of the server by using a firewall solution
• CVE-2020-35565: Activate bruteforce detection via Security → Fail2Ban → WebLogin

Affected Vendors

Affected Products (1)

Affected Sectors

Critical Manufacturing