Riskcovery

CVE-2024-45273

MB connect line/Helmholz: Weak encryption of configuration file

State
Published
Severity
8.4 High
Published
Oct 15, 2024
Updated
Oct 16, 2024
Reserved
Aug 26, 2024

Read the record on cve.org

Description

An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used.

Scores

CVSSScoreVectorSource
3.18.4 HighCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCERTVDE

Weaknesses

Affected Products

ProductVersions
mbNET.miniMB connect line
  • 0.0.0 through 2.2.13Affected
mbNET/mbNET.rokeyMB connect line
  • 0.0.0 through 8.2.0Affected
mbNET HW1MB connect line
  • 0.0.0 through 5.1.11Affected
mbSPIDERMB connect line
  • 0.0.0 through 2.6.5Affected
mbCONNECT24MB connect line
  • 0.0.0 through 2.16.2Affected
mymbCONNECT24MB connect line
  • 0.0.0 through 2.16.2Affected
REX100Helmholz
  • 0.0.0 through <= 2.2.13Affected
REX200/250Helmholz
  • 0.0.0 through <= 8.2.0Affected
myREX24 V2Helmholz
  • 0.0.0 through <= 2.16.2Affected
myREX24.virtualHelmholz
  • 0.0.0 through <= 2.16.2Affected
REX300Helmholz
  • 0.0.0 through <= 5.1.11Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.