myREX24 V2 vulnerabilities

2 known vulnerabilities in myREX24 V2 from Helmholz. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  mbNET.mini: Inadequate Encryption Strength

  CVE-2024-45273Oct 15, 2024MB connect line

  An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used.

• 7.5 High severity

  mbCONNECT24: Use of Weak Credentials

  CVE-2024-45272Oct 15, 2024MB connect line

  An unauthenticated remote attacker can perform a brute-force attack on the credentials of the remote service portal with a high chance of success, resulting in connection lost.