REX 100 vulnerabilities
6 known vulnerabilities in REX 100 from Helmholz. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
mbNET.mini: Out-of-bounds Write
An unauthenticated remote attacker could exploit a buffer overflow vulnerability in the device causing a denial of service that affects only the network initializing wizard (Conftool) service.
- 7.2 High severity
mbNET.mini: Improper Neutralization of Special Elements used in an SQL Command
A high privileged remote attacker can alter the configuration database via POST requests due to improper neutralization of special elements used in a SQL statement.
- 7.2 High severity
mbNET.mini: Improper Neutralization of Special Elements used in an OS Command
A high privileged remote attacker can execute arbitrary system commands via GET requests in the cloud server communication script due to improper neutralization of special elements used in an OS command.
- 7.2 High severity
mbNET.mini: Improper Neutralization of Special Elements used in an OS Command
A high privileged remote attacker can execute arbitrary system commands via POST requests in the diagnostic action due to improper neutralization of special elements used in an OS command.
- 7.2 High severity
mbNET.mini: Improper Neutralization of Special Elements used in an OS Command
A high privileged remote attacker can execute arbitrary system commands via POST requests in the send_sms action due to improper neutralization of special elements used in an OS command.
- 7.2 High severity
mbNET.mini: Improper Neutralization of Special Elements used in an OS Command
A high privileged remote attacker can execute arbitrary system commands via GET requests due to improper neutralization of special elements used in an OS command.