High severity · published Jun 6, 2023
CVE-2023-0985
Helmholz and MB Connect Line: Account takeover via password reset in multiple products
8.8
CVSS
0.8%
EPSS
No
On KEV
Description
An Authorization Bypass vulnerability was found in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual version <= 2.13.3. An authenticated remote user with low privileges can change the password of any user in the same account. This allows to take over the admin user and therefore fully compromise the account.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 56% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MB
mbCONNECT24 · MB Connect Line
1.0.0 through 2.13.3 · source: vendor, NVD
MY
myREX24 · Helmholz
through 2.13.3 · source: vendor
MY
myREX24.virtual · Helmholz
through 2.13.3 · source: vendor
MY
mymbCONNECT24 · MB Connect Line
1.0.0 through 2.13.3 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-0985
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-0985
Mitigation
https://cert.vde.com/en/advisories/VDE-2023-002/
More from myREX24
8.2
CVE-2025-3090
MB connect line: Missing Authentication in mbCONNECT24/mymbCONNECT24
7.5
CVE-2025-3092
MB connect line: Observable response discrepancy in mbCONNECT24/mymbCONNECT24
7.5
CVE-2025-3091
MB connect line: Authorization bypass in mbCONNECT24/mymbCONNECT24
7.5
CVE-2020-35558
An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual through 2.11.2
6.5
CVE-2020-12527
An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2