CVE-2023-34412

Published: Aug 17, 2023Modified: Jun 17, 2026

5.4

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.3 / Impact: 2.7

Source: NVD (Secondary)

Description

A vulnerability in Red Lion Europe mbNET/mbNET.rokey and Helmholz REX 200 and REX 250 devices with firmware lower 7.3.2 allows an authenticated remote attacker with high privileges to inject malicious HTML or JavaScript code (XSS).

Affected (17)

Products: Helmholz: Rex 250 Firmware, Rex 200 Firmware · Redlion: Mbnet.rokey Rkh 210 Firmware, Mbnet.rokey Rkh 216 Firmware, Mbnet.rokey Rkh 235 Firmware, Mbnet.rokey Rkh 259 Firmware, Mbnet Mdh 811 Firmware, Mbnet Mdh 850 Firmware, Mbnet Mdh 871 Firmware, Mbnet Mdh 831 Firmware, Mbnet Mdh 855 Firmware, Mbnet Mdh 876 Firmware, Mbnet Mdh 858 Firmware, Mbnet Mdh 816 Firmware, Mbnet Mdh 841 Firmware, Mbnet Mdh 859 Firmware, Mbnet Mdh 835 Firmware

2 products

15 products

Mbnet.rokey Rkh 210 Firmware

Mbnet.rokey Rkh 216 Firmware

Mbnet.rokey Rkh 235 Firmware

Mbnet.rokey Rkh 259 Firmware

Mbnet Mdh 811 Firmware

Mbnet Mdh 850 Firmware

Mbnet Mdh 871 Firmware

Mbnet Mdh 831 Firmware

Mbnet Mdh 855 Firmware

Mbnet Mdh 876 Firmware

Mbnet Mdh 858 Firmware

Mbnet Mdh 816 Firmware

Mbnet Mdh 841 Firmware

Mbnet Mdh 859 Firmware

Mbnet Mdh 835 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Helmholz Rex 250 Firmware	Before 7.3.2

Running on/with	Platform Versions
Helmholz Rex 250	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Helmholz Rex 200 Firmware	Before 7.3.2

Running on/with	Platform Versions
Helmholz Rex 200	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Redlion Mbnet.rokey Rkh 210 Firmware	Before 7.3.2

Running on/with	Platform Versions
Redlion Mbnet.rokey Rkh 210	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Redlion Mbnet.rokey Rkh 216 Firmware	Before 7.3.2

Running on/with	Platform Versions
Redlion Mbnet.rokey Rkh 216	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Redlion Mbnet.rokey Rkh 235 Firmware	Before 7.3.2

Running on/with	Platform Versions
Redlion Mbnet.rokey Rkh 235	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Redlion Mbnet.rokey Rkh 259 Firmware	Before 7.3.2

Running on/with	Platform Versions
Redlion Mbnet.rokey Rkh 259	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Redlion Mbnet Mdh 811 Firmware	Before 7.3.2

Running on/with	Platform Versions
Redlion Mbnet Mdh 811	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Redlion Mbnet Mdh 850 Firmware	Before 7.3.2

Running on/with	Platform Versions
Redlion Mbnet Mdh 850	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Redlion Mbnet Mdh 871 Firmware	Before 7.3.2

Running on/with	Platform Versions
Redlion Mbnet Mdh 871	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Redlion Mbnet Mdh 831 Firmware	Before 7.3.2

Running on/with	Platform Versions
Redlion Mbnet Mdh 831	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Redlion Mbnet Mdh 855 Firmware	Before 7.3.2

Running on/with	Platform Versions
Redlion Mbnet Mdh 855	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Redlion Mbnet Mdh 876 Firmware	Before 7.3.2

Running on/with	Platform Versions
Redlion Mbnet Mdh 876	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Redlion Mbnet Mdh 858 Firmware	Before 7.3.2

Running on/with	Platform Versions
Redlion Mbnet Mdh 858	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Redlion Mbnet Mdh 816 Firmware	Before 7.3.2

Running on/with	Platform Versions
Redlion Mbnet Mdh 816	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Redlion Mbnet Mdh 841 Firmware	Before 7.3.2

Running on/with	Platform Versions
Redlion Mbnet Mdh 841	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Redlion Mbnet Mdh 859 Firmware	Before 7.3.2

Running on/with	Platform Versions
Redlion Mbnet Mdh 859	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Redlion Mbnet Mdh 835 Firmware	Before 7.3.2

Running on/with	Platform Versions
Redlion Mbnet Mdh 835	All versions

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (4)

https://cert.vde.com/en/advisories/VDE-2023-012/

Source: info@cert.vde.com

Third Party Advisory

https://cert.vde.com/en/advisories/VDE-2023-029/

Source: info@cert.vde.com

Third Party Advisory

https://cert.vde.com/en/advisories/VDE-2023-012/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://cert.vde.com/en/advisories/VDE-2023-029/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.