CVE-2025-3092

An unauthenticated remote attacker can enumerate valid user names from an unprotected endpoint.

Score

CVSS 3.1 7.5 High

Status

Deferred - info@cert.vde.com

Published

2025-06-24

Last modified

2025-06-24

Weaknesses

CWE-204

Affected products

• Myrex24 (Helmholz)
• Myrex24.virtual (Helmholz)
• Mbconnect24 (Mb Connect Line)
• Mymbconnect24 (Mb Connect Line)

References

• https://certvde.com/en/advisories/VDE-2025-035
• https://certvde.com/en/advisories/VDE-2025-038