Skip to content
OpenAdvisories
Critical VDE-2024-068 3 CVEs

MB connect line: Multiple Vulnerabilities in MB connect line Products

Published Oct 15, 2024 · Updated Mar 6, 2026 · Revision 4

Vendor: MB connect line Product: mbNET HW1 Product: mbNET/mbNET.rokey Product: mbSPIDER Product: mymbCONNECT24

Summary

Multiple vulnerabilities have been discovered in MB connect line products that could allow RCE or unauthorized file access.

CVE-2024-45272 affects the mbCONNECT24 and mymbCONNECT24 products.

CVE-2024-45273 affects the mbNET/mbNET.rokey, mbCONNECT24, mymbCONNECT24, mbNET HW1, and mbSPIDER products.

CVE-2024-45275 affects only the mbNET HW1 product.

Details

Impact
CVE-2024-45272 allows brute-force attacks against remote credentials with a high probability of success.

CVE-2024-45273 allows undetectable tampering and manipulation of encrypted configuration files.

CVE-2024-45275 allow remote code execution with system privileges, resulting in full compromise of the device

Remediation
Update mbNET/mbNET.rokey to the version 8.2.1\
Update mbCONNECT24, mymbCONNECT24 to the version 2.16.3\
**Note**: mbNET HW1 and mbSPIDER are EOL and will not receive any further updates.

Vulnerabilities 3

  • Critical 9.8
    CVE-2024-45275

    MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords

    The devices contain two hard coded user accounts with hardcoded passwords that allow an unauthenticated remote attacker for full control of the affected devices.

    MB connect line Helmholz mbNET.mini REX100
  • High 8.4
    CVE-2024-45273

    MB connect line/Helmholz: Weak encryption of configuration file

    An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used.

    MB connect line Helmholz mymbCONNECT24 mbCONNECT24
  • High 7.5
    CVE-2024-45272

    MB connect line/Helmholz: Generation of weak passwords vulnerability

    An unauthenticated remote attacker can perform a brute-force attack on the credentials of the remote service portal with a high chance of success, resulting in connection lost.

    MB connect line Helmholz mymbCONNECT24 mbCONNECT24

Revision history

  1. #4.0.0

    Added CVE-2024-45275

  2. #3.0.0

    Fix: version space

  3. #2.0.0

    Fix: correct certvde domain, added self-reference

  4. #1.0.0

    Initial revision.

References