CVE-2024-45275

MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords

State: Published
Severity: 9.8 Critical
Published: Oct 15, 2024
Updated: Oct 16, 2024
Reserved: Aug 26, 2024

Description

The devices contain two hard coded user accounts with hardcoded passwords that allow an unauthenticated remote attacker for full control of the affected devices.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	CERTVDE

Weaknesses

CWE-798 Use of Hard-coded Credentials

Affected Products

Product	Versions
mbNET.miniMB connect line	0.0.0 through 2.2.13Affected
REX100Helmholz	0.0.0 through 2.2.13Affected

References

https://cert.vde.com/en/advisories/VDE-2024-056
https://cert.vde.com/en/advisories/VDE-2024-066
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-064.txt

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.