CVE-2020-35559

MEDIUM 4.3CVE-2020-35559 · Published 16/02/2021 · updated 17/06/2026

In short

CVE-2020-35559 is a MEDIUM (CVSS 4.3) vulnerability affecting mbconnect24 (mbconnectline), mymbconnect24 (mbconnectline).
Chance of exploitation in the next 30 days (EPSS): 0.81%, higher than 56.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mbconnect24 mbconnectline	`≤ 2.6.2`	No fix yet
mymbconnect24 mbconnectline	`≤ 2.6.2`	No fix yet

Description

An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an unused function that allows an authenticated attacker to use up all available IPs of an account and thus not allow creation of new devices and users.

References

cert.vde.com/de-de/advisories/vde-2021-003 · Third Party Advisory
mbconnectline.com/security-advice · Vendor Advisory

More vulnerabilities in mbconnect24

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

mbconnect24

mbconnectline

≤ 2.6.2

No fix yet

mymbconnect24

mbconnectline

≤ 2.6.2

No fix yet

More vulnerabilities in mbconnect24

See all →