Rex 100 Firmware CVEs and Security Vulnerabilities

CVE-2024-45274

MB connect line/Helmholz: Remote code execution via confnet service

An unauthenticated remote attacker can execute OS commands via UDP on the device due to missing authentication.

CVSS 3.1 · 9.8 Critical EPSS 1.5% KEV · Not listed

Vendors

Products

Rex 100 Rex 100 Firmware Mbnet.mini and 2 more

CVE-2024-45271

MB connect line/Helmholz: Remote code execution due to improper input validation

An unauthenticated local attacker can gain admin privileges by deploying a config file due to improper input validation.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Helmholz Mb Connect Line Mbconnectline and 1 more

Products

Rex 100 Rex 100 Firmware Mbnet.mini and 3 more

CVE-2024-45276

MB connect line/Helmholz: tmp directory exposed via webservice

An unauthenticated remote attacker can get read access to files in the "/tmp" directory due to missing authentication.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Helmholz Mb Connect Line Mbconnectline

Products

Rex 100 Rex 100 Firmware Mbnet.mini and 2 more

CVE-2024-45275

MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords

The devices contain two hard coded user accounts with hardcoded passwords that allow an unauthenticated remote attacker for full control of the affected devices.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed

Vendors

Helmholz Mb Connect Line Mbconnectline

Products

Rex 100 Rex 100 Firmware Mbnet.mini and 2 more

CVE-2024-45273

MB connect line/Helmholz: Weak encryption of configuration file

An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Helmholz Mb Connect Line Mbconnectline

Products

Myrex24.virtual Myrex24 V2 Myrex24 V2 Virtual Server and 32 more

Search vulnerabilities

MB connect line/Helmholz: Remote code execution via confnet service

MB connect line/Helmholz: Remote code execution due to improper input validation

MB connect line/Helmholz: tmp directory exposed via webservice

MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords

MB connect line/Helmholz: Weak encryption of configuration file