CVE:CVE-2021-34574
CNNVD:CNNVD-202108-074
Mb Connect Line MB CONNECT LINE mbCONNECT24是德国Mb Connect Line公司的一套远程服务门户网站。该产品支持远程接入、数据记录和报警等功能。
MB CONNECT LINE mbCONNECT24存在安全漏洞，该漏洞源于在MB连接线mbCONNECT24, mbCONNECT24在版本<= 2.8.0中，攻击者可利用该漏洞更改他的帐户密码为一个新密码，违反密码策略，拦截和修改请求发送给服务器。
solution:Upgrade mbconnectline mbconnect24 to a higher version than 2.11.2,and avoid the version (,2.11.2]; Upgrade mbconnectline mymbconnect24 to a higher version than 2.11.2,and avoid the version (,2.11.2]; Upgrade helmholz myrex24 to a higher version than 2.11.2,and avoid the version (,2.11.2]; Upgrade helmholz myrex24.virtual to a higher version than 2.11.2,and avoid the version (,2.11.2]