MB connect line mbCONNECT24
Moderate fix1 remedy
cpe:2.3:a:mbconnectline:mbconnect24:*:*:*:*:*:*:*
Moderate fix1 remedy
- <= 2.20.0
- 2.20.0
MB Connect Line mbCONNECT24 and mymbCONNECT24 SQL Injection Vulnerability
Vulnerability
Patched
A SQL injection vulnerability has been identified in the MB Connect Line products mbCONNECT24 and mymbCONNECT24, specifically in versions 2.20.0 and prior to 2.20.0. This vulnerability allows low-privileged remote attackers to exploit the system_tag view, leading to an unauthorized access to the database and a complete loss of confidentiality.
Impact
Exploitation of this vulnerability allows for SQL injection, enabling attackers to manipulate database queries and potentially access or modify database information.
Remediation
Users are advised to update their mbCONNECT24 or mymbCONNECT24 instance to version 2.20.1.
Added: May 27, 2026, 9:22 AM
Updated: May 27, 2026, 9:22 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
4.7remediation
7.7relevance
9.2threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.