Read the docs
TI-2025-02700 Aliases CVE-2025-3091GHSA-3mpf-fhf9-62mx

MB connect line: Authorization bypass in mbCONNECT24/mymbCONNECT24

Priority LOW 35CWE-639Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
High
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-639.

Summary

An low privileged remote attacker in possession of the second factor for another user can login as that user without knowledge of the other user`s password.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00378 32nd percentileScored 2026-11-07
Fix Fixed mbCONNECT24 (MB connect line): 2.16.5mymbCONNECT24 (MB connect line): 2.18.0, 2.16.5+2 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
MB connect linembCONNECT24before 2.16.52.16.5Patch availableCNA
MB connect linemymbCONNECT24before 2.18.02.18.0Patch availableCNA
MB connect linemymbCONNECT24before 2.18.02.18.0Patch availableCNA
MB connect linemymbCONNECT24before 2.16.52.16.5Patch availableCNA
HelmholzmyREX24before 2.18.02.18.0Patch availableCNA
HelmholzmyREX24before 2.16.52.16.5Patch availableCNA
HelmholzmyREX24.virtualbefore 2.18.02.18.0Patch availableCNA
HelmholzmyREX24.virtualbefore 2.16.52.16.5Patch availableCNA
  • mbCONNECT24 VendorMB connect line Affected before 2.16.5 Fixed in 2.16.5 Patch available CNA
  • mymbCONNECT24 VendorMB connect line Affected before 2.18.0 Fixed in 2.18.0 Patch available CNA
  • mymbCONNECT24 VendorMB connect line Affected before 2.18.0 Fixed in 2.18.0 Patch available CNA
  • mymbCONNECT24 VendorMB connect line Affected before 2.16.5 Fixed in 2.16.5 Patch available CNA
  • myREX24 VendorHelmholz Affected before 2.18.0 Fixed in 2.18.0 Patch available CNA
  • myREX24 VendorHelmholz Affected before 2.16.5 Fixed in 2.16.5 Patch available CNA
  • myREX24.virtual VendorHelmholz Affected before 2.18.0 Fixed in 2.18.0 Patch available CNA
  • myREX24.virtual VendorHelmholz Affected before 2.16.5 Fixed in 2.16.5 Patch available CNA

Remediation

  • Fix · CNA mbCONNECT24 (MB connect line) Fixed in 2.16.5
  • Fix · CNA mymbCONNECT24 (MB connect line) Fixed in 2.18.0
  • Fix · CNA mymbCONNECT24 (MB connect line) Fixed in 2.18.0
  • Fix · CNA mymbCONNECT24 (MB connect line) Fixed in 2.16.5
  • Fix · CNA myREX24 (Helmholz) Fixed in 2.18.0
  • Fix · CNA myREX24 (Helmholz) Fixed in 2.16.5
  • Fix · CNA myREX24.virtual (Helmholz) Fixed in 2.18.0
  • Fix · CNA myREX24.virtual (Helmholz) Fixed in 2.16.5

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    MB connect line mymbCONNECT24 2.18.0

    3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2025-02699 MB connect line: Missing Authentication in mbCONNECT24/mymbCONNECT24Priority MEDIUM 42
    • TI-2025-02701 MB connect line: Observable response discrepancy in mbCONNECT24/mymbCONNECT24Priority LOW 39
    Show all 3 records →
  • Release ·

    Helmholz myREX24, myREX24.virtual 2.18.0

    3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2025-02699 MB connect line: Missing Authentication in mbCONNECT24/mymbCONNECT24Priority MEDIUM 42
    • TI-2025-02701 MB connect line: Observable response discrepancy in mbCONNECT24/mymbCONNECT24Priority LOW 39
    Show all 3 records →
Show 2 more groups
  • Release ·

    Helmholz myREX24, myREX24.virtual 2.16.5

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2025-02701 MB connect line: Observable response discrepancy in mbCONNECT24/mymbCONNECT24Priority LOW 39
    Show all 2 records →
  • Release ·

    MB connect line mbCONNECT24, mymbCONNECT24 2.16.5

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2025-02701 MB connect line: Observable response discrepancy in mbCONNECT24/mymbCONNECT24Priority LOW 39
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-3091
  2. 2026-10-03 Alias added: GHSA-3mpf-fhf9-62mx

References

Other 2

  • TI-2024-30346 MB connect line/Helmholz: Remote code execution via confnet service CVSS 3.1CRITICAL 9.8
  • TI-2026-25416 Unauthenticated RCE in com_mb24sysapi CVSS 3.1CRITICAL 9.8
  • TI-2024-30347 MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords CVSS 3.1CRITICAL 9.8
  • TI-2021-12922 OS Command Injection in mbDIALUP <= 3.9R0.0 CVSS 3.1CRITICAL 9.8
  • TI-2024-15924 MB connect line: Cloud API access due to a lack of authentication for a critical function CVSS 3.1CRITICAL 9.1
  • TI-2026-25997 MB connect line mbCONNECT24 vulnerable to an unauthenticated SQL injection in the setinfo Endpoint CVSS 3.1CRITICAL 9.1
See all 103 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences