Approved changes feed: RSS · Atom

cpe:2.3:a:mb_connect_line:mbnet.rokey:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMb Connect Line (40f64ffd-1097-56cb-a890-2fe37828274d)
ProductMbnet.Rokey (fa4bc901-5630-563f-922f-8e9b0e5f0c0d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-23943 vulnerable 2026-06-08 06:29:40.983619 MB connect line: Cloud API access due to a lack of authentication for a critical function
CRITICAL (9.1)
An unauthenticated remote attacker can gain access to the cloud API due to a lack of authentication for a critical function in the affected devices. Availability is not affected.
Published: 2025-03-18T11:03:49.466Z
Updated: 2025-03-18T13:13:28.924Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-23942 vulnerable 2026-06-08 06:29:40.982569 MB connect line: Configuration File on the client workstation is not encrypted
HIGH (7.1)
A local user may find a configuration file on the client workstation with unencrypted sensitive data. This allows an attacker to impersonate the device or prevent the device from accessing the cloud portal which leads to a DoS.
Published: 2025-03-18T11:03:35.116Z
Updated: 2025-08-20T06:11:05.971Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.