Summary
Multiple vulnerabilities have been discovered in Helmholz products that could allow RCE or unauthorized file access.
CVE-2024-45272 affects the myREX24V2 and myREX24V2.virtual products.
CVE-2024-45273 affects the REX 200/REX 250, myREX24V2, myREX24V2.virtual products.
CVE-2024-45275 affects only the REX 200 / REX 250 products.
Details
Impact
CVE-2024-45272 allows brute-force attacks against remote credentials with a high probability of success.
CVE-2024-45273 allows undetectable tampering and manipulation of encrypted configuration files.
CVE-2024-45275 allow remote code execution with system privileges, resulting in full compromise of the device
Remediation
Update REX 200 /REX 250 to the version 8.2.1\
Update myREX24V2, myREX24V2.virtual to the version 2.16.3\
**Note**: REX 300 is EOL and will not receive any further updates.
Vulnerabilities 3
-
Critical 9.8
MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords
The devices contain two hard coded user accounts with hardcoded passwords that allow an unauthenticated remote attacker for full control of the affected devices.
-
High 8.4
MB connect line/Helmholz: Weak encryption of configuration file
An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used.
-
High 7.5
MB connect line/Helmholz: Generation of weak passwords vulnerability
An unauthenticated remote attacker can perform a brute-force attack on the credentials of the remote service portal with a high chance of success, resulting in connection lost.
Revision history
-
#4.0.0
Added CVE-2024-45275
-
#3.0.0
Fix: version space
-
#2.0.0
Fix: correct certvde domain, added self-reference
-
#1.0.0
Initial revision.
References
-
CERT@VDE Security Advisories for Helmholz
https://certvde.com/en/advisories/vendor/helmholz
-
VDE-2024-069: Helmholz: Multiple Vulnerabilities in Helmholz products - HTML
https://certvde.com/en/advisories/VDE-2024-069