MB connect line/Helmholz: Weak encryption of configuration file
An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
mbNET.mini
Vendor
MB connect line
Product
mbNET.mini
Platforms
Unknown
Default status
unaffected
mbNET.mini · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
Unavailable
2.2.13
None listed
mbNET/mbNET.rokey
Vendor
MB connect line
Product
mbNET/mbNET.rokey
Platforms
Unknown
Default status
unaffected
mbNET/mbNET.rokey · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
Unavailable
8.2.0
None listed
mbNET HW1
Vendor
MB connect line
Product
mbNET HW1
Platforms
Unknown
Default status
unaffected
mbNET HW1 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
Unavailable
5.1.11
None listed
mbSPIDER
Vendor
MB connect line
Product
mbSPIDER
Platforms
Unknown
Default status
unaffected
mbSPIDER · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
Unavailable
2.6.5
None listed
mbCONNECT24
Vendor
MB connect line
Product
mbCONNECT24
Platforms
Unknown
Default status
unaffected
mbCONNECT24 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
Unavailable
2.16.2
None listed
mymbCONNECT24
Vendor
MB connect line
Product
mymbCONNECT24
Platforms
Unknown
Default status
unaffected
mymbCONNECT24 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
Unavailable
2.16.2
None listed
REX100
Vendor
Helmholz
Product
REX100
Platforms
Unknown
Default status
unaffected
REX100 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
Unavailable
<= 2.2.13
None listed
REX200/250
Vendor
Helmholz
Product
REX200/250
Platforms
Unknown
Default status
unaffected
REX200/250 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
Unavailable
<= 8.2.0
None listed
myREX24 V2
Vendor
Helmholz
Product
myREX24 V2
Platforms
Unknown
Default status
unaffected
myREX24 V2 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0.0.0
affected
semver
Unavailable
<= 2.16.2
None listed
myREX24.virtual
Vendor
Helmholz
Product
myREX24.virtual
Platforms
Unknown
Default status
unaffected
myREX24.virtual · Scoped product and version facts