Rex 100 Firmware vulnerabilities

3 known vulnerabilities in Rex 100 Firmware from Helmholz. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  mbNET.mini: Use of Hard-coded Credentials

  CVE-2024-45275Oct 15, 2024MB connect line

  The devices contain two hard coded user accounts with hardcoded passwords that allow an unauthenticated remote attacker for full control of the affected devices.

• 7.8 High severity

  mbNET.mini: Inadequate Encryption Strength

  CVE-2024-45273Oct 15, 2024MB connect line

  An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used.

• 7.2 High severity

  mbNET.mini: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-5672Jul 3, 2024Red Lion EuropeEPSS 1.22%

  A high privileged remote attacker can execute arbitrary system commands via GET requests due to improper neutralization of special elements used in an OS command.