Siemens Mendix Email Connector

An authenticated attacker could read and modify sensitive information stored in or processed by the Email Connector module, potentially compromising confidentiality and integrity of data handled by Mendix applications in industrial environments.

Organizations running Mendix applications with the Email Connector module in low-trust environments (development, testing) or where user accounts are shared are at risk. Utilities and manufacturers using Mendix for operational reporting, notifications, or SCADA integration should prioritize this update. The risk is elevated if Email Connector handles sensitive plant data (alarm notifications, setpoint changes, or credential information).

An attacker with valid credentials to the Mendix application can directly access Email Connector module entities that lack proper access controls. The attacker does not need special network access or elevated privileges beyond standard user authentication—they can exploit this through the normal application interface.