Lucene search
HistorySep 14, 2022 - 2:15 p.m.
CVE-2022-22520
remote attack enumeration user validation webservice mb connect line mymbconnect24 mbconnect24 helmholz myrex24 myrex24.virtual v2.11.2.
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
36.6%
A remote, unauthenticated attacker can enumerate valid users by sending specific requests to the webservice of MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2.
Affected configurations
Node
mbconnectlinembconnect24Range≤2.11.2
ORmbconnectlinemymbconnect24Range≤2.11.2
Node
helmholzmyrex24Range≤2.11.2
ORhelmholzmyrex24.virtualRange≤2.11.2
Related
prion
prion
Code injection
2022-09-14 14:15:00
cve
cve
CVE-2022-22520
2022-09-14 14:15:12
cvelist
cvelist
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
0.001 Low
EPSS
Percentile
36.6%
Related for NVD:CVE-2022-22520