CVE-2020-35558: Helmholz MYREX24

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual through 2.11.2. There is an SSRF in the in the MySQL access check, allowing an attacker to scan for open ports and gain some information about possible credentials.

Affected products

• Helmholz MYREX24: up to and including 2.11.2
• Helmholz MYREX24.VIRTUAL: up to and including 2.11.2
• Mbconnectline MBCONNECT24: up to and including 2.11.2
• Mbconnectline MYMBCONNECT24: up to and including 2.11.2

Published 2021-02-16. Last modified 2026-06-17.