Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

10 records

Vendor: Helmholz Component: Myrex24.virtual Clear all filters
TI-2023-04450 CVE-2023-4834 · GHSA-rqp9-whcw-xww5

Improper privilege management in Red Lion Europe mbCONNECT24

Priority LOW 20

In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implemented access validation allows an authenticated, low privileged attacker to gain re…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00405 Published 2023-10-16 No fix listed CWE-269
TI-2022-06796 CVE-2022-22520 · GHSA-mwvc-vgg7-3665

User enumeration vulnerability in MB connect line and Helmholz products

Priority LOW 26

A remote, unauthenticated attacker can enumerate valid users by sending specific requests to the webservice of MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01031 Published 2022-09-14 No fix listed CWE-204
TI-2021-13592 CVE-2021-34574 · GHSA-c4j8-5xv4-xcxh

Password policy evasion in products of MB connect line and Helmholz

Priority LOW 21

In MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 an authenticated attacker can change the password of his account into a new password that violates th…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00659 Published 2021-08-02 No fix listed CWE-669
TI-2020-18069 CVE-2020-35561 · GHSA-44gj-57cg-mxj8

SSRF in variuos products of MB connect line and Helmholz

Priority LOW 27

An issue was discovered MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01236 Published 2021-02-16 No fix listed CWE-918
TI-2020-18066 CVE-2020-35558 · GHSA-8977-r7mx-5hvr

SSRF in products of MB connect line and Helmholz

Priority LOW 36

An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual through 2.11.2.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01479 Published 2021-02-16 No fix listed CWE-918
TI-2020-18065 CVE-2020-35557 · GHSA-4jrw-3q8x-9gpf

Improper Access Validation in products of MB connect line and Helmholz

Priority LOW 31

An issue in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 allows a logged in user to see devices in the account he should not have access to due to im…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01005 Published 2021-02-16 No fix listed CWE-269