Helmholz: Multiple Vulnerabilities in Helmholz REX100 Product
Advisory ansehen veröffentlicht 2024-10-15
Multiple vulnerabilities have been discovered in REX100 allowing for RCE or unauthorized file access.
01
beschreibt (5)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-45276US | —OT erhöht | — | ||
An unauthenticated remote attacker can get read access to files in the "/tmp" directory due to missing authentication. | ||||
| CVE-2024-45275US | critical9.8OT erhöht | — | ||
The devices contain two hard coded user accounts with hardcoded passwords that allow an unauthenticated remote attacker for full control of the affected devices. | ||||
| CVE-2024-45274US | —OT erhöht | — | ||
An unauthenticated remote attacker can execute OS commands via UDP on the device due to missing authentication. | ||||
| CVE-2024-45273US | high7.8 | — | ||
An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used. | ||||
| CVE-2024-45271US | high7.8 | — | ||
An unauthenticated local attacker can gain admin privileges by deploying a config file due to improper input validation. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
03
Behebungen (5)
- BehobenFirmware <=2.2.13 installed on Helmholz REX100
Update REX100 to the version 2.3.1
- BehobenFirmware <=2.2.13 installed on Helmholz REX100
Update REX100 to the version 2.3.1
- BehobenFirmware <=2.2.13 installed on Helmholz REX100
Update REX100 to the version 2.3.1
- BehobenFirmware <=2.2.13 installed on Helmholz REX100
Update REX100 to the version 2.3.1
- BehobenFirmware <=2.2.13 installed on Helmholz REX100
Update REX100 to the version 2.3.1
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan