Rex 200 CVEs and Security Vulnerabilities

CVE-2025-41688

High Privilege RCE via LUA Sandbox Escape

A high privileged remote attacker can execute arbitrary OS commands using an undocumented method allowing to escape the implemented LUA sandbox.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Helmholz Mbconnectline

Products

Rex 200 Rex 300 Mbnet Hw1 and 1 more

CVE-2024-45273

MB connect line/Helmholz: Weak encryption of configuration file

An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used.

CVSS 3.1 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Helmholz Mb Connect Line Mbconnectline

Products

Myrex24.virtual Myrex24 V2 Myrex24 V2 Virtual Server and 32 more

CVE-2024-45272

MB connect line/Helmholz: Generation of weak passwords vulnerability

An unauthenticated remote attacker can perform a brute-force attack on the credentials of the remote service portal with a high chance of success, resulting in connection lost.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Vendors

Helmholz Mbconnectline

Products

Myrex24.virtual Myrex24 V2 Myrex24 V2 Virtual Server and 22 more

CVE-2023-34412

Stored XXS vulnerability in mbnet, mbnet.rokey, REX 200 and REX 250

A vulnerability in Red Lion Europe mbNET/mbNET.rokey and Helmholz REX 200 and REX 250 devices with firmware lower 7.3.2 allows an authenticated remote attacker with high privileges to inject malicious HTML or JavaScript code (XSS).

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Helmholz Redlion

Products

Rex 200 Rex 200 Firmware Rex 250 and 31 more

Search vulnerabilities

High Privilege RCE via LUA Sandbox Escape

MB connect line/Helmholz: Weak encryption of configuration file

MB connect line/Helmholz: Generation of weak passwords vulnerability

Stored XXS vulnerability in mbnet, mbnet.rokey, REX 200 and REX 250