Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2024-23942 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

A local user may find a configuration file on the client workstation with unencrypted sensitive data. This allows an attacker to impersonate the device or prevent the device from accessing the cloud portal which leads to a DoS.

Metrics

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://cert.vde.com/en/advisories/VDE-2024-010 [email protected]AdvisoryBundleRemedy

Weakness Enumeration

CWE-IDCWE NameSource
CWE-312Cleartext Storage of Sensitive Information[email protected]

Affected Products

ProductVersions
MB connect line mbCONNECT24
< 2.16.2 (semver)

CPE

  • cpe:2.3:a:mbconnectline:mbconnect24:*:*:*:*:*:*:*:*

Remediation

  • Upgrade: 2.16.2moderate effort
  • Mitigation:low effort

    Ensure that the device's serial number is known to mbCONNECT24 before generating the downloadable configuration. This will result in the configuration being encrypted, allowing only the correct device to decrypt it.

MB connect line mbNET
All versions

CPE

  • No CPEs found in CPE dictionary for this product.

Remediation

  • No remediation found in references.
MB connect line mbNET.rokey
All versions

CPE

  • No CPEs found in CPE dictionary for this product.

Remediation

  • No remediation found in references.
MB connect line mymbCONNECT24
< 2.16.2 (semver)

CPE

  • cpe:2.3:a:mbconnectline:mymbconnect24:*:*:*:*:*:*:*:*

Remediation

  • Upgrade: 2.16.2moderate effort
  • Mitigation:low effort

    Ensure that the device's serial number is known to mymbCONNECT24 before generating the downloadable configuration. This will result in the configuration being encrypted, allowing only the correct device to decrypt it.

Change History

4 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2024-23942
NVD Published Date:
Mar 18, 2025
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2024-23942 Details - Not Deferred