CVE-2025-3091 - Vulnerability Details - OpenCVE

An low privileged remote attacker in possession of the second factor for another user can login as that user without knowledge of the other user`s password.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

No data.

No data.

No data.

References

Link	Providers
https://certvde.com/en/advisories/VDE-2025-035
https://certvde.com/en/advisories/VDE-2025-038

History

Tue, 24 Jun 2025 14:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Tue, 24 Jun 2025 08:30:00 +0000

Type	Values Removed	Values Added
Description		An low privileged remote attacker in possession of the second factor for another user can login as that user without knowledge of the other user`s password.
Title		MB connect line: Authorization bypass in mbCONNECT24/mymbCONNECT24
Weaknesses		CWE-639
References		https://certvde.com/en/advisories/VDE-2025-035 https://certvde.com/en/advisories/VDE-2025-038
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: CERTVDE

Published: 2025-06-24T08:10:29.717Z

Updated: 2025-06-24T13:56:13.121Z

Reserved: 2025-04-01T13:41:22.429Z

Link: CVE-2025-3091

Vulnrichment

Updated: 2025-06-24T13:56:08.753Z

NVD

Status : Awaiting Analysis

Published: 2025-06-24T09:15:25.190

Modified: 2025-06-26T18:58:14.280

Link: CVE-2025-3091

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-3091", "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "state": "PUBLISHED", "assignerShortName": "CERTVDE", "dateReserved": "2025-04-01T13:41:22.429Z", "datePublished": "2025-06-24T08:10:29.717Z", "dateUpdated": "2025-06-24T13:56:13.121Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "mbCONNECT24", "vendor": "MB connect line", "versions": [{"lessThan": "2.16.5", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "mymbCONNECT24", "vendor": "MB connect line", "versions": [{"lessThan": "2.18.0", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "mymbCONNECT24", "vendor": "MB connect line", "versions": [{"lessThan": "2.18.0", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "mymbCONNECT24", "vendor": "MB connect line", "versions": [{"lessThan": "2.16.5", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "myREX24", "vendor": "Helmholz", "versions": [{"lessThan": "2.18.0", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "myREX24", "vendor": "Helmholz", "versions": [{"lessThan": "2.16.5", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "myREX24.virtual", "vendor": "Helmholz", "versions": [{"lessThan": "2.18.0", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "myREX24.virtual", "vendor": "Helmholz", "versions": [{"lessThan": "2.16.5", "status": "affected", "version": "0", "versionType": "semver"}]}], "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Peter Husted Simonsen"}, {"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Irwin Przeperski"}, {"lang": "en", "type": "reporter", "user": "00000000-0000-4000-9000-000000000000", "value": "Eviden"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "An low privileged remote attacker in possession of the second factor for another user can login as that user without knowledge of the other user`s password."}], "value": "An low privileged remote attacker in possession of the second factor for another user can login as that user without knowledge of the other user`s password."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-639", "description": "CWE-639 Authorization Bypass Through User-Controlled Key", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE", "dateUpdated": "2025-06-24T08:10:29.717Z"}, "references": [{"url": "https://certvde.com/en/advisories/VDE-2025-035"}, {"url": "https://certvde.com/en/advisories/VDE-2025-038"}], "source": {"advisory": "VDE-2025-035", "defect": ["CERT@VDE#641772"], "discovery": "UNKNOWN"}, "title": "MB connect line: Authorization bypass in mbCONNECT24/mymbCONNECT24", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-06-24T13:55:50.726894Z", "id": "CVE-2025-3091", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-24T13:56:13.121Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-3091", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-06-24T13:55:50.726894Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-24T13:56:08.753Z"}}], "cna": {"title": "MB connect line: Authorization bypass in mbCONNECT24/mymbCONNECT24", "source": {"defect": ["CERT@VDE#641772"], "advisory": "VDE-2025-035", "discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Peter Husted Simonsen"}, {"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Irwin Przeperski"}, {"lang": "en", "type": "reporter", "user": "00000000-0000-4000-9000-000000000000", "value": "Eviden"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "MB connect line", "product": "mbCONNECT24", "versions": [{"status": "affected", "version": "0", "lessThan": "2.16.5", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "MB connect line", "product": "mymbCONNECT24", "versions": [{"status": "affected", "version": "0", "lessThan": "2.18.0", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "MB connect line", "product": "mymbCONNECT24", "versions": [{"status": "affected", "version": "0", "lessThan": "2.18.0", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "MB connect line", "product": "mymbCONNECT24", "versions": [{"status": "affected", "version": "0", "lessThan": "2.16.5", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Helmholz", "product": "myREX24", "versions": [{"status": "affected", "version": "0", "lessThan": "2.18.0", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Helmholz", "product": "myREX24", "versions": [{"status": "affected", "version": "0", "lessThan": "2.16.5", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Helmholz", "product": "myREX24.virtual", "versions": [{"status": "affected", "version": "0", "lessThan": "2.18.0", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Helmholz", "product": "myREX24.virtual", "versions": [{"status": "affected", "version": "0", "lessThan": "2.16.5", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://certvde.com/en/advisories/VDE-2025-035"}, {"url": "https://certvde.com/en/advisories/VDE-2025-038"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "An low privileged remote attacker in possession of the second factor for another user can login as that user without knowledge of the other user`s password.", "supportingMedia": [{"type": "text/html", "value": "An low privileged remote attacker in possession of the second factor for another user can login as that user without knowledge of the other user`s password.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-639", "description": "CWE-639 Authorization Bypass Through User-Controlled Key"}]}], "providerMetadata": {"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE", "dateUpdated": "2025-06-24T08:10:29.717Z"}}}, "cveMetadata": {"cveId": "CVE-2025-3091", "state": "PUBLISHED", "dateUpdated": "2025-06-24T13:56:13.121Z", "dateReserved": "2025-04-01T13:41:22.429Z", "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "datePublished": "2025-06-24T08:10:29.717Z", "assignerShortName": "CERTVDE"}, "dataVersion": "5.1"}