[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fdp35AF2ZSBUpC5UqzE1QRGVBYUF0u1EZbxkbd7pAcSE":3,"g5a-risk:CVE-2022-22520":126},{"success":4,"data":5,"meta":123},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":26,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":52,"references":53,"referencesCount":64,"weaknesses":65,"weaknessesCount":74,"isActivelyExploited":75,"cisaInfo":26,"otxData":26,"relatedBlogPosts":76,"seoMetadata":77,"configurations":102,"relatedVendorCves":121,"notableEvents":122},"CVE-2022-22520","What is CVE-2022-22520?","A remote, unauthenticated attacker can enumerate valid users by sending specific requests to the webservice of MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2.","A remote, unauthenticated attacker can enumerate valid users by sending specific requests to the webservice of MB connect line mymbCONNECT24, mbCONNECT24 and...","2022-09-14T14:15:12.427","2022-10-01T02:33:08.29",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"info@cert.vde.com","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,1.4,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},0.01009,[33,33,33,33,33,33,33],"Medium",[37,42,45,49],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"mbconnectline","mbconnect24","*","cpe:2.3:a:mbconnectline:mbconnect24:*:*:*:*:*:*:*:*",{"vendor":38,"product":43,"version":40,"criteria":44,"vulnerable":4},"mymbconnect24","cpe:2.3:a:mbconnectline:mymbconnect24:*:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":40,"criteria":48,"vulnerable":4},"helmholz","myrex24","cpe:2.3:a:helmholz:myrex24:*:*:*:*:*:*:*:*",{"vendor":46,"product":50,"version":40,"criteria":51,"vulnerable":4},"myrex24.virtual","cpe:2.3:a:helmholz:myrex24.virtual:*:*:*:*:*:*:*:*",4,[54,60],{"url":55,"source":56,"tags":57},"https:\u002F\u002Fcert.vde.com\u002Fen\u002Fadvisories\u002FVDE-2022-011","Vde",[58,59],"Third Party Advisory","VDB Entry",{"url":61,"source":56,"tags":62},"https:\u002F\u002Fcert.vde.com\u002Fen\u002Fadvisories\u002FVDE-2022-039",[63],"Not Applicable",2,[66],{"id":67,"name":68,"description":69,"extendedDescription":70,"status":71,"abstraction":72,"structure":73},"CWE-204","Observable Response Discrepancy","The product provides different responses to incoming requests in a way that reveals internal state information to an unauthorized actor outside of the intended control sphere.","This issue frequently occurs during authentication, where a difference in failed-login messages could allow an attacker to determine if the username is valid or not. These exposures can be inadvertent (bug) or intentional (design).","Incomplete","Base","Simple",1,false,[],{"title":78,"metaDescription":79,"keywords":80,"canonicalUrl":81,"structuredData":82},"What is CVE-2022-22520? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-22520, a medium severity cyber security vulnerability from 2022. A remote, unauthenticated attacker can enumerate valid us...","CVE-2022-22520, CVE-2022-22520 vulnerability, CVE-2022-22520 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, mbconnectline security, helmholz security, mbconnect24 vulnerability, mymbconnect24 vulnerability, myrex24 vulnerability, myrex24.virtual vulnerability","\u002Fwhat-is\u002Fcve-2022-22520",{"@context":83,"@type":84,"headline":78,"description":79,"datePublished":10,"dateModified":11,"author":85,"publisher":89,"about":93,"mainEntityOfPage":97,"articleSection":100,"keywords":101},"https:\u002F\u002Fschema.org","TechArticle",{"@type":86,"name":87,"url":88},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":86,"name":87,"url":88,"logo":90},{"@type":91,"url":92},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":94,"name":6,"description":95,"additionalType":96},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":98,"@id":99},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-22520","Cybersecurity","CVE-2022-22520, CVE-2022-22520 vulnerability, CVE-2022-22520 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[103,113],{"Operator":26,"Negate":26,"Nodes":104},[105],{"Operator":106,"Negate":26,"CPEMatch":107},"OR",[108,111],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":109,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":110},"2D55D697-78A4-44E3-B6B6-E5349C610148","2.11.2",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":112,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":110},"04561EEC-B011-46F8-8C56-E5546D0ECD6A",{"Operator":26,"Negate":26,"Nodes":114},[115],{"Operator":106,"Negate":26,"CPEMatch":116},[117,119],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":118,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":110},"8EE3EED2-43AC-4129-B2C8-88DEBFEF8BA0",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":120,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":110},"847B9BE1-D7E5-4B6B-A59D-282BB58A8B64",[],[],{"lastModified":11,"cacheTime":124,"version":125},1792372540020,"2.0",{"score":127,"band":128,"action":129,"scoredAt":130},24,"Low","Monitor","2026-10-16T06:55:40.858483+00:00"]