cveboard RSS feed

CVE-2023-34412

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2023
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Stored XXS vulnerability in mbnet, mbnet.rokey, REX 200 and REX 250

A vulnerability in Red Lion Europe mbNET/mbNET.rokey and Helmholz REX 200 and REX 250 devices with firmware lower 7.3.2 allows an authenticated remote attacker with high privileges to inject malicious HTML or JavaScript code (XSS).

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

mbNET

Vendor
Red Lion Europe
Product
mbNET
Platforms
Unknown
Default status
unaffected
mbNET · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0affectedsemver7.3.2UnavailableNone listed

mbNET.rokey

Vendor
Red Lion Europe
Product
mbNET.rokey
Platforms
Unknown
Default status
unaffected
mbNET.rokey · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0affectedsemver7.3.2UnavailableNone listed

REX 200

Vendor
Helmholz
Product
REX 200
Platforms
Unknown
Default status
unaffected
REX 200 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0affectedsemver7.3.2UnavailableNone listed

REX 250

Vendor
Helmholz
Product
REX 250
Platforms
Unknown
Default status
unaffected
REX 250 · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0affectedsemver7.3.2UnavailableNone listed