CVE-2024-45273: An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used.

PriorityP342high7.8CVSS 3.1

AVLACLPRLUINSUCHIHAH

EPSS

0.09%

0.7th percentile

An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used.

Affected

26 ranges· showing 25

Vendor	Product	Version range	Fixed in
helmholz	myrex24.virtual	0.0.0 – <= 2.16.2	—
helmholz	myrex24_v2	0.0.0 – <= 2.16.2	—
helmholz	myrex24_v2_virtual_server	< 2.16.3	2.16.3
helmholz	rex100	0.0.0 – <= 2.2.13	—
helmholz	rex200_250	0.0.0 – <= 8.2.0	—
helmholz	rex300	0.0.0 – <= 5.1.11	—
helmholz	rex_100_firmware	< 2.3.1	2.3.1
helmholz	rex_200_firmware	< 8.2.1	8.2.1
helmholz	rex_250_firmware	< 8.2.1	8.2.1
helmholz	rex_300_firmware	<= 5.1.11	—
mb_connect_line	mbconnect24	0.0.0 – 2.16.2	—
mb_connect_line	mbnet.mini	0.0.0 – 2.2.13	—
mb_connect_line	mbnet_hw1	0.0.0 – 5.1.11	—
mb_connect_line	mbnet_mbnet.rokey	0.0.0 – 8.2.0	—
mb_connect_line	mbspider	0.0.0 – 2.6.5	—
mb_connect_line	mymbconnect24	0.0.0 – 2.16.2	—
mbconnectline	mbconnect24	< 2.16.3	2.16.3
mbconnectline	mbnet.mini_firmware	< 2.3.1	2.3.1
mbconnectline	mbnet.rokey_firmware	< 8.2.1	8.2.1
mbconnectline	mbnet_firmware	< 8.2.1	8.2.1
mbconnectline	mbnet_hw1_firmware	<= 5.1.11	—
mbconnectline	mbspider_mdh_905_firmware	<= 2.6.5	—
mbconnectline	mbspider_mdh_906_firmware	<= 2.6.5	—
mbconnectline	mbspider_mdh_915_firmware	<= 2.6.5	—
mbconnectline	mbspider_mdh_916_firmware	<= 2.6.5	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.