← Back

CVE-2024-45273

nvd nist
Published: Oct 15, 2024Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used.

Affected (15)

Mbconnectline
10 products
Mbnet.mini Firmware
Mbconnect24
Mymbconnect24
Mbspider Mdh 905 Firmware
Mbspider Mdh 915 Firmware
Mbspider Mdh 906 Firmware
Mbspider Mdh 916 Firmware
Mbnet Hw1 Firmware
Mbnet Firmware
Mbnet.rokey Firmware
Helmholz
5 products
Myrex24 V2 Virtual Server
Rex 300 Firmware
Rex 200 Firmware
Rex 250 Firmware
Rex 100 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mbnet.mini Firmware
Before 2.3.1
Running on/withPlatform Versions
Mbconnectline
Mbnet.mini
All versions
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Myrex24 V2 Virtual Server
Before 2.16.3
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rex 300 Firmware
Up to 5.1.11
Running on/withPlatform Versions
Helmholz
Rex 300
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rex 200 Firmware
Before 8.2.1
Running on/withPlatform Versions
Helmholz
Rex 200
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rex 250 Firmware
Before 8.2.1
Running on/withPlatform Versions
Helmholz
Rex 250
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rex 100 Firmware
Before 2.3.1
Running on/withPlatform Versions
Helmholz
Rex 100
All versions
Configuration G
2 vulnerable
Vulnerable SoftwareAffected Versions
Mbconnect24
Before 2.16.3
Mymbconnect24
Before 2.16.3
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mbspider Mdh 905 Firmware
Up to 2.6.5
Running on/withPlatform Versions
Mbconnectline
Mbspider Mdh 905
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mbspider Mdh 915 Firmware
Up to 2.6.5
Running on/withPlatform Versions
Mbconnectline
Mbspider Mdh 915
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mbspider Mdh 906 Firmware
Up to 2.6.5
Running on/withPlatform Versions
Mbconnectline
Mbspider Mdh 906
All versions
Configuration K
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mbspider Mdh 916 Firmware
Up to 2.6.5
Running on/withPlatform Versions
Mbconnectline
Mbspider Mdh 916
All versions
Configuration L
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mbnet Hw1 Firmware
Up to 5.1.11
Running on/withPlatform Versions
Mbconnectline
Mbnet Hw1
All versions
Configuration M
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mbnet Firmware
Before 8.2.1
Running on/withPlatform Versions
Mbconnectline
Mbnet
All versions
Configuration N
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mbnet.rokey Firmware
Before 8.2.1
Running on/withPlatform Versions
Mbconnectline
Mbnet.rokey
All versions

Related CWEs

CWE-261
Weak Encoding for Password
Obscuring a password with a trivial encoding does not protect the password.
CWE-326
Inadequate Encryption Strength
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

References (5)

Source: info@cert.vde.com
Third Party Advisory
Source: info@cert.vde.com
Third Party Advisory
Source: info@cert.vde.com
Third Party Advisory
Source: info@cert.vde.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.