CVE-2020-12527

MEDIUM 6.5CVE-2020-12527 · Published 02/03/2021 · updated 17/06/2026

In short

CVE-2020-12527 is a MEDIUM (CVSS 6.5) vulnerability affecting myrex24 (helmholz), myrex24.virtual (helmholz), mbconnect24 (mbconnectline).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 63.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
myrex24 helmholz	`≤ 2.11.2`	No fix yet
myrex24.virtual helmholz	`≤ 2.11.2`	No fix yet
mbconnect24 mbconnectline	`≤ 2.11.2`	No fix yet
mymbconnect24 mbconnectline	`≤ 2.11.2`	No fix yet

Description

An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. Improper access validation allows a logged in user to shutdown or reboot devices in his account without having corresponding permissions.

References

cert.vde.com/en/advisories/VDE-2021-003 · Third Party Advisory
cert.vde.com/en/advisories/VDE-2022-039 · Third Party Advisory

More vulnerabilities in myrex24

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

In short

CVE-2020-12527 is a MEDIUM (CVSS 6.5) vulnerability affecting myrex24 (helmholz), myrex24.virtual (helmholz), mbconnect24 (mbconnectline).

Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 63.9% of all vulnerabilities.

No patched version is listed yet: follow the vendor's advisory in References.

Package

Affected versions

Patched versions

myrex24

helmholz

≤ 2.11.2

No fix yet

myrex24.virtual

helmholz

≤ 2.11.2

No fix yet

mbconnect24

mbconnectline

≤ 2.11.2

No fix yet

mymbconnect24

mbconnectline

≤ 2.11.2

No fix yet

More vulnerabilities in myrex24

See all →