{ "document": { "acknowledgments": [ { "organization": "CERT@VDE", "summary": "coordination", "urls": [ "https://certvde.com" ] } ], "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en-US", "notes": [ { "category": "summary", "text": "Two vulnerabilities in mbCONNECT24 and mymbCONNECT24 can lead to information disclosure and arbitrary code execution.\n\nPlease consult the CVE entries for details.", "title": "Summary" }, { "title": "Remediation", "text": "Update to 2.9.0", "category": "description" } ], "publisher": { "category": "vendor", "contact_details": "security-team@mbconnectline.de", "name": "MB connect line GmbH", "namespace": "https://mbconnectline.com" }, "references": [ { "category": "external", "summary": "MB connect line advisory overview at CERT@VDE", "url": "https://certvde.com/en/advisories/vendor/mbconnectline/" }, { "category": "self", "summary": "VDE-2021-031: MB connect line: Apache Guacamole related vulnerabilities in mbCONNECT24 - HTML", "url": "https://certvde.com/en/advisories/VDE-2021-031" }, { "summary": "VDE-2021-031: MB connect line: Apache Guacamole related vulnerabilities in mbCONNECT24 - CSAF", "url": "https://mbconnectline.csaf-tp.certvde.com/.well-known/csaf/white/2021/vde-2021-031.json", "category": "self" } ], "title": "MB connect line: Apache Guacamole related vulnerabilities in mbCONNECT24", "tracking": { "aliases": [ "VDE-2021-031" ], "current_release_date": "2025-05-14T12:28:19.000Z", "generator": { "date": "2025-01-27T09:53:05.468Z", "engine": { "name": "Secvisogram", "version": "2.5.17" } }, "id": "VDE-2021-031", "initial_release_date": "2021-07-22T11:33:00.000Z", "revision_history": [ { "date": "2021-07-22T11:35:00.000Z", "number": "1", "summary": "Initial revision." }, { "number": "2", "summary": "Fix: version space, added distribution", "date": "2025-05-14T12:28:19.000Z" } ], "status": "final", "version": "2" } }, "product_tree": { "branches": [ { "category": "vendor", "name": "MB connect line", "branches": [ { "category": "product_family", "name": "Software", "branches": [ { "name": "mbCONNECT24", "category": "product_name", "branches": [ { "name": "<=2.8.0", "category": "product_version_range", "product": { "product_id": "CSAFPID-51001", "name": "mbCONNECT24 <=2.8.0" } }, { "name": "2.9.0", "category": "product_version", "product": { "name": "mbCONNECT24 2.9.0", "product_id": "CSAFPID-52001" } } ] }, { "name": "mymbCONNECT24", "category": "product_name", "branches": [ { "name": "<=2.8.0", "category": "product_version_range", "product": { "name": "mymbCONNECT24 <=2.8.0", "product_id": "CSAFPID-51002" } }, { "name": "2.9.0", "category": "product_version", "product": { "name": "mymbCONNECT24 2.9.0", "product_id": "CSAFPID-52002" } } ] } ] } ] } ], "product_groups": [ { "group_id": "CSAFGID-0001", "summary": "Affected Products", "product_ids": [ "CSAFPID-51001", "CSAFPID-51002" ] }, { "group_id": "CSAFGID-0002", "summary": "Fixed Products", "product_ids": [ "CSAFPID-52001", "CSAFPID-52002" ] } ] }, "vulnerabilities": [ { "cve": "CVE-2020-9498", "title": "CVE-2020-9498", "cwe": { "id": "CWE-787", "name": "Out-of-bounds Write" }, "notes": [ { "title": "Vulnerability Description", "category": "description", "text": "Apache Guacamole 1.1.0 and older may mishandle pointers involved inprocessing data received via RDP static virtual channels. If a userconnects to a malicious or compromised RDP server, a series ofspecially-crafted PDUs could result in memory corruption, possiblyallowing arbitrary code to be executed with the privileges of therunning guacd process." } ], "remediations": [ { "details": "Update to 3.9R0.5", "category": "vendor_fix", "product_ids": [ "CSAFPID-51001" ] } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H", "baseScore": 6.7, "baseSeverity": "MEDIUM", "temporalScore": 6.7, "temporalSeverity": "MEDIUM", "environmentalScore": 6.7, "environmentalSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH" }, "products": [ "CSAFPID-51001", "CSAFPID-51002" ] } ], "product_status": { "known_affected": [ "CSAFPID-51001", "CSAFPID-51002" ], "fixed": [ "CSAFPID-52001", "CSAFPID-52002" ] } }, { "cve": "CVE-2020-9497", "title": "CVE-2020-9497", "cwe": { "id": "CWE-20", "name": "Improper Input Validation" }, "notes": [ { "title": "Vulnerability Description", "category": "description", "text": "Apache Guacamole 1.1.0 and older do not properly validate datareceived from RDP servers via static virtual channels. If a userconnects to a malicious or compromised RDP server, specially-craftedPDUs could result in disclosure of information within the memory ofthe guacd process handling the connection." } ], "remediations": [ { "details": "Update to 3.9R0.5", "category": "vendor_fix", "product_ids": [ "CSAFPID-51001" ] } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N", "baseScore": 4.4, "baseSeverity": "MEDIUM", "temporalScore": 4.4, "temporalSeverity": "MEDIUM", "environmentalScore": 4.4, "environmentalSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "LOW", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE" }, "products": [ "CSAFPID-51001", "CSAFPID-51002" ] } ], "product_status": { "known_affected": [ "CSAFPID-51001", "CSAFPID-51002" ], "fixed": [ "CSAFPID-52001", "CSAFPID-52002" ] } } ] }