CVE-2020-35561

MEDIUM 5.3CVE-2020-35561 · Published 16/02/2021 · updated 17/06/2026

In short

CVE-2020-35561 is a MEDIUM (CVSS 5.3) vulnerability affecting myrex24 (helmholz), myrex24.virtual (helmholz), mbconnect24 (mbconnectline).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 69.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
myrex24 helmholz	`≤ 2.11.2`	No fix yet
myrex24.virtual helmholz	`≤ 2.11.2`	No fix yet
mbconnect24 mbconnectline	`≤ 2.11.2`	No fix yet
mymbconnect24 mbconnectline	`≤ 2.11.2`	No fix yet

Description

An issue was discovered MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. There is an SSRF in the HA module allowing an unauthenticated attacker to scan for open ports.

References

cert.vde.com/en/advisories/VDE-2021-003 · Third Party Advisory
cert.vde.com/en/advisories/VDE-2022-039 · Third Party Advisory
mbconnectline.com/security-advice · Vendor Advisory

More vulnerabilities in myrex24

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

In short

CVE-2020-35561 is a MEDIUM (CVSS 5.3) vulnerability affecting myrex24 (helmholz), myrex24.virtual (helmholz), mbconnect24 (mbconnectline).

Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 69.1% of all vulnerabilities.

No patched version is listed yet: follow the vendor's advisory in References.

Package

Affected versions

Patched versions

myrex24

helmholz

≤ 2.11.2

No fix yet

myrex24.virtual

helmholz

≤ 2.11.2

No fix yet

mbconnect24

mbconnectline

≤ 2.11.2

No fix yet

mymbconnect24

mbconnectline

≤ 2.11.2

No fix yet

More vulnerabilities in myrex24

See all →