CVE-2023-4834

Summary

CVE-2023-4834 is a vulnerability affecting Red Lion Europe's mbCONNECT24 and mymbCONNECT24, as well as Helmholz myREX24 and myREX24.virtual up to version 2.14.2. An authenticated, low-privileged attacker can exploit this issue by bypassing access validation checks. Consequently, they are granted unauthorized read access to limited, non-critical device information within their account. This vulnerability poses a potential risk to data confidentiality.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.