Lucene search
PRIOn knowledge basePRION:CVE-2022-22520HistorySep 14, 2022 - 2:15 p.m.
Code injection
2022-09-1414:15:00
PRIOn knowledge base
www.prio-n.com
3
code injection
remote attacker
user enumeration
mb connect line
mymbconnect24
mbconnect24
helmholz myrex24
myrex24.virtual
nvd
A remote, unauthenticated attacker can enumerate valid users by sending specific requests to the webservice of MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2.
| CPE | Name | Operator | Version |
|---|---|---|---|
| myrex24 | le | 2.11.2 | |
| myrex24.virtual | le | 2.11.2 | |
| mbconnect24 | le | 2.11.2 | |
| mymbconnect24 | le | 2.11.2 |
