Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2024-23943

MB connect line: Cloud API access due to a lack of authentication for a critical function

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

An unauthenticated remote attacker can gain access to the cloud API due to a lack of authentication for a critical function in the affected devices. Availability is not affected.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MB connect line mbCONNECT24

Default version status: unaffected

  • 0 to < 2.16.2affected

MB connect line mbNET

Default version status: unaffected

  • 0 to < 8.2.0affected

MB connect line mbNET.rokey

Default version status: unaffected

  • 0 to < 8.2.0affected

MB connect line mymbCONNECT24

Default version status: unaffected

  • 0 to < 2.16.2affected

References