CVE-2023-0985 Helmholz and MB Connect Line: Account takeover via password reset in multiple products
Low-privilege users can reset passwords for any user in their account, enabling admin takeover and full account compromise in Helmholz and MB Connect Line devices.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-0985?
CVE-2023-0985 is a high-severity authentication bypass vulnerability in Helmholz mbCONNECT24, published on 6 Jun 2023. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
An Authorization Bypass vulnerability was found in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual version <= 2.13.3. An authenticated remote user with low privileges can change the password of any user in the same account. This allows to take over the admin user and therefore fully compromise the account.
Weakness: CWE-639
Which versions are affected by CVE-2023-0985?
It affects 2 products.
Products include Mbconnectline Mbconnect24, Mbconnectline Mymbconnect24.
How do I fix CVE-2023-0985?
No fix has been published for CVE-2023-0985 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2023-0985 being exploited?
There is no known exploitation of CVE-2023-0985 in the wild and no public exploit code.
Other vulnerabilities in Helmholz mbCONNECT24
Sources
Also known as GHSA-xrvf-m29v-829x.