Summary
An authenticated remote attacker can exploit an undocumented method to escape the LUA sandbox in REX200/250 devices, enabling the execution of arbitrary operating system commands and leading to full system compromise.
Details
Impact
This vulnerability allows an authenticated remote attacker to fully compromise the system by executing arbitrary OS commands.
Remediation
Update REX 200/250 to at least version 7.3.0\
**Note**: REX 300 is EOL and will not receive any further updates.
Vulnerabilities 1
-
High 7.2
High Privilege RCE via LUA Sandbox Escape
A high privileged remote attacker can execute arbitrary OS commands using an undocumented method allowing to escape the implemented LUA sandbox.
Revision history
-
#1
Initial revision.
References
-
Product security incident reports
https://www.helmholz.de/service-support/service/security-psirt
-
CERT@VDE Security Advisories for Helmholz
https://certvde.com/en/advisories/vendor/helmholz
-
VDE-2025-069: Helmholz: Sandbox escape in REX200/250 LUA interpreter - HTML
https://certvde.com/en/advisories/VDE-2025-065