« Back to list

Helmholz

Helmholz REX 250 Firmware: vulnerabilities and CVEs

Helmholz REX 250 Firmware has 3 published vulnerabilities, 0 of them in the last 12 months. 0 are rated critical and 0 are listed by CISA as actively exploited.

CVEs3
Last 12 months0
Critical0
Actively exploited0

All vulnerabilities in the catalogue →⭐ Follow this technology

Latest vulnerabilities

CVESeverityEPSSActive exploitationPublishedDescription
CVE-2024-45273High (7.8)0.09%—Oct 15, 2024
An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used.
CVE-2024-45272High (7.5)0.62%—Oct 15, 2024
An unauthenticated remote attacker can perform a brute-force attack on the credentials of the remote service portal with a high chance of success, resulting in connection lost.
CVE-2023-34412Medium (5.4)0.43%—Aug 17, 2023
A vulnerability in Red Lion Europe mbNET/mbNET.rokey and Helmholz REX 200 and REX 250 devices with firmware lower 7.3.2 allows an authenticated remote attacker with high privileges to inject malicious HTML or JavaScript…

🎯 How it gets exploited (ATT&CK techniques)

  1. T1068 Exploitation for Privilege Escalation1
  2. T1190 Exploit Public-Facing Application1
  3. T1499.004 Application or System Exploitation1
  4. T1552.001 Credentials In Files1

Number of CVEs of this technology mapped to each exploitation or primary-impact technique.

Other products by Helmholz