Read the docs
TI-2024-15923 Aliases CVE-2024-23942GHSA-ghcf-vj3j-r9v5

MB connect line: Configuration File on the client workstation is not encrypted

Priority LOW 30CWE-312Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-312.

Summary

A local user may find a configuration file on the client workstation with unencrypted sensitive data. This allows an attacker to impersonate the device or prevent the device from accessing the cloud portal which leads to a DoS.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00116 1st percentileScored 2026-11-07
Fix Fixed mbCONNECT24 (MB connect line): 2.16.2mbNET (MB connect line): 8.2.0+2 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
MB connect linembCONNECT24before 2.16.22.16.2Patch availableCNA
MB connect linembNETbefore 8.2.08.2.0Patch availableCNA
MB connect linembNET.rokeybefore 8.2.08.2.0Patch availableCNA
MB connect linemymbCONNECT24before 2.16.22.16.2Patch availableCNA
  • mbCONNECT24 VendorMB connect line Affected before 2.16.2 Fixed in 2.16.2 Patch available CNA
  • mbNET VendorMB connect line Affected before 8.2.0 Fixed in 8.2.0 Patch available CNA
  • mbNET.rokey VendorMB connect line Affected before 8.2.0 Fixed in 8.2.0 Patch available CNA
  • mymbCONNECT24 VendorMB connect line Affected before 2.16.2 Fixed in 2.16.2 Patch available CNA

Remediation

  • Fix · CNA mbCONNECT24 (MB connect line) Fixed in 2.16.2
  • Fix · CNA mbNET (MB connect line) Fixed in 8.2.0
  • Fix · CNA mbNET.rokey (MB connect line) Fixed in 8.2.0
  • Fix · CNA mymbCONNECT24 (MB connect line) Fixed in 2.16.2

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    MB connect line mbCONNECT24, mbNET and 2 more products 2.16.2, 8.2.0

    2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2024-15924 MB connect line: Cloud API access due to a lack of authentication for a critical functionPriority MEDIUM 48
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-23942
  2. 2026-10-03 Alias added: GHSA-ghcf-vj3j-r9v5

References

Other 1

  • TI-2024-30346 MB connect line/Helmholz: Remote code execution via confnet service CVSS 3.1CRITICAL 9.8
  • TI-2026-25416 Unauthenticated RCE in com_mb24sysapi CVSS 3.1CRITICAL 9.8
  • TI-2024-30347 MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords CVSS 3.1CRITICAL 9.8
  • TI-2021-12922 OS Command Injection in mbDIALUP <= 3.9R0.0 CVSS 3.1CRITICAL 9.8
  • TI-2024-15924 MB connect line: Cloud API access due to a lack of authentication for a critical function CVSS 3.1CRITICAL 9.1
  • TI-2026-25997 MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the setinfo Endpoint CVSS 3.1CRITICAL 9.1
See all 103 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences