← Database

CVE-2021-34574

MEDIUM CVSS: 4.3 Published: 2021-08-02 Modified: 2026-06-17

Description

In MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 an authenticated attacker can change the password of his account into a new password that violates the password policy by intercepting and modifying the request that is send to the server.

Affected Platforms

Mbconnectline Mbconnect24Helmholz Myrex24.VirtualMbconnectline Mymbconnect24Helmholz Myrex24

Weakness Type

CWE-669, CWE-669

References