CVE-2023-4834

mediumpriority · track · 0EPSS 0.004 · 34 %ileDEEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.40% (34th) EPSS

CVSS 4.3 · medium

Is it mine?

14 products

Check your exposure

Who says so?

5 sources

cnnvd · enisa_euvd · helmholz_psirt · mb_connect_line_psirt

EPSS · scored 2026-10-23

In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implemented access validation allows an authenticated, low privileged attacker to gain read access to limited, non-critical device information in his account he should not have access to.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedmb_connect_line_psirt
Update to latest Version 2.14.3
Fixedhelmholz_psirt
Update to latest Version 2.14.3

cvss

Technical severity, 0–10. One row per scoring source.

4.3

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.14.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:Nsecondary · ENISA EU

v3.14.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:Nsecondary · info@cert.vde.comexploitability 2.8 · impact 1.4

v3.14mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

v3.14.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:Nsecondary · Helmholz PSIRT

v3.14.3mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:Nsecondary · MB connect line PSIRT

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Trackcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-269USCWE-269USCWE-269US

affected products (14)

Products and version ranges known to be affected.

mbCONNECT24≤ 0 ≤2.14.2enisa_euvdEU
myREX24≤ 0 ≤2.14.2enisa_euvdEU
myREX24.virtual≤ 0 ≤2.14.2enisa_euvdEU
mymbCONNECT24≤ 0 ≤2.14.2enisa_euvdEU
Helmholz myREX24≤ 2.14.2helmholz_psirtDE
Helmholz myREX24all versionsfixedhelmholz_psirtDE
Helmholz myREX24.virtualall versionsfixedhelmholz_psirtDE
Helmholz myREX24.virtual≤ 2.14.2helmholz_psirtDE
MB connect line mbCONNECT24≤ 2.14.2mb_connect_line_psirtDE
MB connect line mymbCONNECT24≤ 2.14.2mb_connect_line_psirtDE
helmholz myrex24≤ 2.14.2nvdUScpe:2.3:a:helmholz:myrex24:*:*:*:*:*:*:*:*
helmholz myrex24.virtual≤ 2.14.2nvdUScpe:2.3:a:helmholz:myrex24.virtual:*:*:*:*:*:*:*:*
mbconnectline mbconnect24≤ 2.14.2nvdUScpe:2.3:a:mbconnectline:mbconnect24:*:*:*:*:*:*:*:*
mbconnectline mymbconnect24≤ 2.14.2nvdUScpe:2.3:a:mbconnectline:mymbconnect24:*:*:*:*:*:*:*:*

advisories (2)

Vendor and ecosystem advisories describing this.

VDE-2023-041MB connect line: Vulnerability allows access to non-critical information in mbCONNECT24 and mymbCONNECT242023-10-16csaf · mb_connect_line_psirtDE
In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implemented access validation allows an authenticated, low privileged attacker to gain read access to limited, non-critical device information in his account he should not have access to.
VDE-2023-043Helmholz: Vulnerability allows access to non-critical information in myREX24 and myREX24.virtual2023-10-16csaf · helmholz_psirtDE
A vulnerability in the affected products allows an authenticated, low-privileged attacker to gain unauthorized read access to limited, non-critical device information. The issue arises from improper access validation.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd helmholz_psirt mb_connect_line_psirt nvd NVD CVE.org MITRE

published 2023-10-16modified 2026-06-17

references (8)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan