Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2024-23942

MB connect line: Configuration File on the client workstation is not encrypted

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

A local user may find a configuration file on the client workstation with unencrypted sensitive data. This allows an attacker to impersonate the device or prevent the device from accessing the cloud portal which leads to a DoS.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MB connect line mbCONNECT24

Default version status: unaffected

  • 0 to < 2.16.2affected

MB connect line mbNET

Default version status: unaffected

  • 0 to < 8.2.0affected

MB connect line mbNET.rokey

Default version status: unaffected

  • 0 to < 8.2.0affected

MB connect line mymbCONNECT24

Default version status: unaffected

  • 0 to < 2.16.2affected

References