Helmholz: Vulnerability allows access to non-critical information in myREX24 and myREX24.virtual
view advisory published 2023-10-16
A vulnerability in the affected products allows an authenticated, low-privileged attacker to gain unauthorized read access to limited, non-critical device information. The issue arises from improper access validation.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-4834US | — | — | ||
In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implemented access validation allows an authentic… | ||||
02
references
External citations — patches, advisories, analysis.
- VDE-2023-043: Helmholz: Vulnerability allows access to non-critical information in myREX24 and myREX24.virtual - HTMLself
- CERT@VDE Security Advisories for Helmholz GmbH & Co. KGexternal
- VDE-2023-043: Helmholz: Vulnerability allows access to non-critical information in myREX24 and myREX24.virtual - CSAFself
- Vendor PSIRTexternal
03
remediations (1)
- Fixed
Update to latest Version 2.14.3
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan