CVE-2024-45274 MB connect line/Helmholz: Remote code execution via confnet service
CriticalCVSS 9.8
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An unauthenticated remote attacker can execute OS commands via UDP on the device due to missing authentication.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| MB connect line mbNET.mini | >= 0.0.0, <= 2.2.13 | No fix listed |
| Helmholz REX100 | >= 0.0.0, <= 2.2.13 | No fix listed |
| MB connect line mbNET.mini | <= 2.2.13 | No fix listed |
| Helmholz rex 100 firmware | <= 2.2.13 | No fix listed |
| mbconnectline mbnet.mini firmware | < 2.3.1 | 2.3.1 |
| Helmholz rex 100 firmware | < 2.3.1 | 2.3.1 |
References
- cert.vde.com third-party-advisory
- cert.vde.com third-party-advisory
- www.syss.de
- seclists.org