MB connect line: Observable response discrepancy in mbCONNECT24/mymbCONNECT24
Priority LOW 39CWE-204Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-204.
Summary
An unauthenticated remote attacker can enumerate valid user names from an unprotected endpoint.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00469 40th percentileScored 2026-11-07
Fix Fixed myREX24 (Helmholz): 2.18.0, 2.16.5myREX24.virtual (Helmholz): 2.18.0, 2.16.5+2 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Helmholz | myREX24 | before 2.18.0 | 2.18.0 | Patch available | CNA |
| Helmholz | myREX24 | before 2.16.5 | 2.16.5 | Patch available | CNA |
| Helmholz | myREX24.virtual | before 2.18.0 | 2.18.0 | Patch available | CNA |
| Helmholz | myREX24.virtual | before 2.16.5 | 2.16.5 | Patch available | CNA |
| MB connect line | mbCONNECT24 | before 2.16.5 | 2.16.5 | Patch available | CNA |
| MB connect line | mymbCONNECT24 | before 2.18.0 | 2.18.0 | Patch available | CNA |
| MB connect line | mymbCONNECT24 | before 2.18.0 | 2.18.0 | Patch available | CNA |
| MB connect line | mymbCONNECT24 | before 2.16.5 | 2.16.5 | Patch available | CNA |
- myREX24 VendorHelmholz Affected before 2.18.0 Fixed in 2.18.0 Patch available CNA
- myREX24 VendorHelmholz Affected before 2.16.5 Fixed in 2.16.5 Patch available CNA
- myREX24.virtual VendorHelmholz Affected before 2.18.0 Fixed in 2.18.0 Patch available CNA
- myREX24.virtual VendorHelmholz Affected before 2.16.5 Fixed in 2.16.5 Patch available CNA
- mbCONNECT24 VendorMB connect line Affected before 2.16.5 Fixed in 2.16.5 Patch available CNA
- mymbCONNECT24 VendorMB connect line Affected before 2.18.0 Fixed in 2.18.0 Patch available CNA
- mymbCONNECT24 VendorMB connect line Affected before 2.18.0 Fixed in 2.18.0 Patch available CNA
- mymbCONNECT24 VendorMB connect line Affected before 2.16.5 Fixed in 2.16.5 Patch available CNA
Remediation
- Fix · CNA myREX24 (Helmholz) Fixed in 2.18.0
- Fix · CNA myREX24 (Helmholz) Fixed in 2.16.5
- Fix · CNA myREX24.virtual (Helmholz) Fixed in 2.18.0
- Fix · CNA myREX24.virtual (Helmholz) Fixed in 2.16.5
- Fix · CNA mbCONNECT24 (MB connect line) Fixed in 2.16.5
- Fix · CNA mymbCONNECT24 (MB connect line) Fixed in 2.18.0
- Fix · CNA mymbCONNECT24 (MB connect line) Fixed in 2.18.0
- Fix · CNA mymbCONNECT24 (MB connect line) Fixed in 2.16.5
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
MB connect line mymbCONNECT24 2.18.0
3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2025-02699 MB connect line: Missing Authentication in mbCONNECT24/mymbCONNECT24Priority MEDIUM 42
- TI-2025-02700 MB connect line: Authorization bypass in mbCONNECT24/mymbCONNECT24Priority LOW 35
- Release ·
Helmholz myREX24, myREX24.virtual 2.18.0
3 records Highest priority Priority MEDIUM 1 MEDIUM, 2 LOW
Other records, highest priority first
- TI-2025-02699 MB connect line: Missing Authentication in mbCONNECT24/mymbCONNECT24Priority MEDIUM 42
- TI-2025-02700 MB connect line: Authorization bypass in mbCONNECT24/mymbCONNECT24Priority LOW 35
Show 2 more groups
- Release ·
Helmholz myREX24, myREX24.virtual 2.16.5
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2025-02700 MB connect line: Authorization bypass in mbCONNECT24/mymbCONNECT24Priority LOW 35
- Release ·
MB connect line mbCONNECT24, mymbCONNECT24 2.16.5
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2025-02700 MB connect line: Authorization bypass in mbCONNECT24/mymbCONNECT24Priority LOW 35
Timeline
- 2026-10-02 Threatist record created from CVE-2025-3092
- 2026-10-03 Alias added: GHSA-w2r4-cm6p-7h86
References
More Helmholz vulnerabilities
- TI-2024-05267 Red Lion Europe: mbNET.mini vulnerable to OS command injection CVSS 3.1HIGH 7.2
- TI-2024-30346 MB connect line/Helmholz: Remote code execution via confnet service CVSS 3.1CRITICAL 9.8
- TI-2026-25416 Unauthenticated RCE in com_mb24sysapi CVSS 3.1CRITICAL 9.8
- TI-2024-30347 MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords CVSS 3.1CRITICAL 9.8
- TI-2026-29508 Unauthenticated SQLi in getAccountData function CVSS 4.0HIGH 8.7
- TI-2026-29478 Unauthenticated SQLi in sync_data24 task CVSS 4.0HIGH 8.7
Sources
- CVE-2025-3092 · CVE Program
- CVE-2025-3092 · NVD
- FIRST EPSS
- GHSA-w2r4-cm6p-7h86 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences