Read the docs

Helmholz

Records77All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high57CVSS 7.0–8.9

Exploited now

Helmholz records in CISA KEV

No Helmholz vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Myrex24 10 records LOW Myrex24.virtual 10 records LOW Rex 100 Firmware 5 records MEDIUM Rex 200 Firmware 3 records MEDIUM Rex 250 Firmware 3 records MEDIUM Myrex24 V2 Virtual Server 2 records MEDIUM Rex 300 Firmware 2 records MEDIUM

Records

10 records in Myrex24.virtual · all components

TI-2020-18066 CVE-2020-35558 · GHSA-8977-r7mx-5hvr

SSRF in products of MB connect line and Helmholz

Priority LOW 36

An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual through 2.11.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01479 Published 2021-02-16 No fix listed CWE-918
TI-2020-18065 CVE-2020-35557 · GHSA-4jrw-3q8x-9gpf

Improper Access Validation in products of MB connect line and Helmholz

Priority LOW 31

An issue in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 allows a logged in user to see devices in the account he should not have access to due to im…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01005 Published 2021-02-16 No fix listed CWE-269
TI-2020-18069 CVE-2020-35561 · GHSA-44gj-57cg-mxj8

SSRF in variuos products of MB connect line and Helmholz

Priority LOW 27

An issue was discovered MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01236 Published 2021-02-16 No fix listed CWE-918
TI-2022-06796 CVE-2022-22520 · GHSA-mwvc-vgg7-3665

User enumeration vulnerability in MB connect line and Helmholz products

Priority LOW 26

A remote, unauthenticated attacker can enumerate valid users by sending specific requests to the webservice of MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01009 Published 2022-09-14 No fix listed CWE-204
TI-2021-13592 CVE-2021-34574 · GHSA-c4j8-5xv4-xcxh

Password policy evasion in products of MB connect line and Helmholz

Priority LOW 21

In MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 an authenticated attacker can change the password of his account into a new password that violates th…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00659 Published 2021-08-02 No fix listed CWE-669
TI-2023-04450 CVE-2023-4834 · GHSA-rqp9-whcw-xww5

Improper privilege management in Red Lion Europe mbCONNECT24

Priority LOW 20

In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implemented access validation allows an authenticated, low privileged attacker to gain re…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00405 Published 2023-10-16 No fix listed CWE-269
Open these records in search →