An issue was discovered in the MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 software in all versions through 2.5.0. There is an unauthenticated remote code execution in the com_mb24sysapi module.
| Software | From | Fixed in |
|---|---|---|
| mbconnectline / mymbconnect24 | - | 2.5.0.x |
| mbconnectline / mbconnect24 | - | 2.5.0.x |