Skip to content

CVE-2023-34412 Stored XXS vulnerability in mbnet, mbnet.rokey, REX 200 and REX 250

MediumCVSS 5.4 EPSS 0.43%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

A vulnerability in Red Lion Europe mbNET/mbNET.rokey and Helmholz REX 200 and REX 250 devices with firmware lower 7.3.2 allows an
authenticated remote attacker with high privileges to inject malicious HTML or JavaScript code (XSS).

Affected products

ProductAffected versionsFixed in
Red Lion Europe mbNET < 7.3.2 7.3.2
Red Lion Europe mbNET.rokey < 7.3.2 7.3.2
Helmholz REX 200 < 7.3.2 7.3.2
Helmholz REX 250 < 7.3.2 7.3.2
Helmholz rex 250 firmware < 7.3.2 7.3.2
Helmholz rex 200 firmware < 7.3.2 7.3.2
redlion mbnet.rokey rkh 210 firmware < 7.3.2 7.3.2
redlion mbnet.rokey rkh 216 firmware < 7.3.2 7.3.2
redlion mbnet.rokey rkh 235 firmware < 7.3.2 7.3.2
redlion mbnet.rokey rkh 259 firmware < 7.3.2 7.3.2
redlion mbnet mdh 811 firmware < 7.3.2 7.3.2
redlion mbnet mdh 850 firmware < 7.3.2 7.3.2
redlion mbnet mdh 871 firmware < 7.3.2 7.3.2
redlion mbnet mdh 831 firmware < 7.3.2 7.3.2
redlion mbnet mdh 855 firmware < 7.3.2 7.3.2
redlion mbnet mdh 876 firmware < 7.3.2 7.3.2
redlion mbnet mdh 858 firmware < 7.3.2 7.3.2
redlion mbnet mdh 816 firmware < 7.3.2 7.3.2
redlion mbnet mdh 841 firmware < 7.3.2 7.3.2
redlion mbnet mdh 859 firmware < 7.3.2 7.3.2
redlion mbnet mdh 835 firmware < 7.3.2 7.3.2

References