A high privileged remote attacker can exploit an unauthenticated SQL Injection vulnerability in the view.html.php files UpdateParam function due to improper neutralization of special elements in a SQL UPDATE command allowing for reading the whole database and changing values in a non critical table. This can result in a total loss of confidentiality and some loss of integrity.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
mbCONNECT24
Vendor
MB connect line
Product
mbCONNECT24
Platforms
Unknown
Default status
unaffected
mbCONNECT24 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
Unavailable
2.20.0
None listed
mymbCONNECT24
Vendor
MB connect line
Product
mymbCONNECT24
Platforms
Unknown
Default status
unaffected
mymbCONNECT24 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
Unavailable
2.20.0
None listed
mbCONNECT24
Vendor
MB connect line
Product
mbCONNECT24
Platforms
Unknown
Default status
unaffected
mbCONNECT24 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.20.0
affected
Unavailable
Unavailable
Unavailable
None listed
mymbCONNECT24
Vendor
MB connect line
Product
mymbCONNECT24
Platforms
Unknown
Default status
unaffected
mymbCONNECT24 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.20.0
affected
Unavailable
Unavailable
Unavailable
None listed
myREX24V2
Vendor
Helmholz
Product
myREX24V2
Platforms
Unknown
Default status
unaffected
myREX24V2 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
Unavailable
2.20.0
None listed
myREX24V2.virtual
Vendor
Helmholz
Product
myREX24V2.virtual
Platforms
Unknown
Default status
unaffected
myREX24V2.virtual · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
Unavailable
2.20.0
None listed
myREX24V2
Vendor
Helmholz
Product
myREX24V2
Platforms
Unknown
Default status
unaffected
myREX24V2 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.20.0
affected
Unavailable
Unavailable
Unavailable
None listed
myREX24V2.virtual
Vendor
Helmholz
Product
myREX24V2.virtual
Platforms
Unknown
Default status
unaffected
myREX24V2.virtual · Scoped product and version facts