CVE-2020-35564

HIGH 7.5CVE-2020-35564 · Published 16/02/2021 · updated 17/06/2026

In short

CVE-2020-35564 is a HIGH (CVSS 7.5) vulnerability affecting mbconnect24 (mbconnectline), mymbconnect24 (mbconnectline).
Chance of exploitation in the next 30 days (EPSS): 0.93%, higher than 60.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mbconnect24 mbconnectline	`≤ 2.6.2`	No fix yet
mymbconnect24 mbconnectline	`≤ 2.6.2`	No fix yet

Description

An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.2. There is an outdated and unused component allowing for malicious user input of active code.

References

cert.vde.com/de-de/advisories/vde-2021-003 · Third Party Advisory
mbconnectline.com/security-advice · Vendor Advisory

More vulnerabilities in mbconnect24

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

mbconnect24

mbconnectline

≤ 2.6.2

No fix yet

mymbconnect24

mbconnectline

≤ 2.6.2

No fix yet

More vulnerabilities in mbconnect24

See all →