CVE:CVE-2020-12527
CNNVD:CNNVD-202103-209
MB CONNECT LINE mymbCONNECT24是德国MB CONNECT LINE公司的一款适用于虚拟环境的内部远程维护解决方案。
MB CONNECT LINE mymbCONNECT24 V2.6.2 版本及之前版本存在安全漏洞，该漏洞源于不正确的使用访问验证允许登录的用户与他不应该访问的帐户中的设备交互。
solution:Upgrade mbconnectline mbconnect24 to a higher version than 2.11.2,and avoid the version (,2.11.2]; Upgrade mbconnectline mymbconnect24 to a higher version than 2.11.2,and avoid the version (,2.11.2]; Upgrade helmholz myrex24 to a higher version than 2.11.2,and avoid the version (,2.11.2]; Upgrade helmholz myrex24.virtual to a higher version than 2.11.2,and avoid the version (,2.11.2]