VULNERABILITY INTELLIGENCE

CVE-2020-12527

CVSS score6.8 MEDIUM

EPSS probability1.03%

CISA KEVNot currently listed

Published2021-03-02

Last modified2026-06-17

Description

An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. Improper access validation allows a logged in user to shutdown or reboot devices in his account without having corresponding permissions.