CVE-2020-23282: Mv Mconnect

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

SQL injection in Logon Page in MV's mConnect application, v02.001.00, allows an attacker to use a non existing user with a generic password to connect to the application and get access to unauthorized information.

Affected products

• Mv Mconnect: version 02.001.00 only; version 2013.1.6.8 only

Published 2021-07-21. Last modified 2026-06-17.