CVE-2023-4834

published 2023-10-16

CVE-2023-4834: In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implemented access…

Priority P4 23 medium 4.3 CVSS 3.1

AV N AC L PR L UI N S U C L I N A N

In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implemented access validation allows an authenticated, low privileged attacker to gain read access to limited, non-critical device information in his account he should not have access to.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
helmholz	myrex24	<= 2.14.2	—
helmholz	myrex24.virtual	<= 2.14.2	—
mbconnectline	mbconnect24	<= 2.14.2	—
mbconnectline	mymbconnect24	<= 2.14.2	—
red_lion_europe	mbconnect24	<= 2.14.2	—
red_lion_europe	mymbconnect24	<= 2.14.2	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-269