Skip to content
OpenAdvisories

Vendor

Helmholz

84 known vulnerabilities.

Products

myREX24V2 56 myREX24V2.virtual 56 myREX24.virtual 11 REX 100 9 myREX24 9 REX100 7 REX200/250 3 myREX24 V2 2 REX300 1 REX 300 1 REX 200/250 1 REX 200 1 REX 250 1 shDialup 0 2.6.2 0 myREX24 V2 virtual 0 REX200 0 REX250 0 REX 200/REX 250 0 FLEXtra FLAT PROFINET-Switch 4-Port 0 FLEXtra FLAT PROFINET-Switch 8-Port 0 FLEXtra FLAT PROFINET-Switch 16-Port 0 FLEXtra IP67 PROFINET-Switch 8-Port 0 WALl IE Standard 4-Port 0
All Critical High Medium Low Exploited only Public exploit

84 results · Feed

  • High 8.8
    CVE-2023-0985

    Helmholz and MB Connect Line: Account takeover via password reset in multiple products

    An Authorization Bypass vulnerability was found in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual version <= 2.13.3. An authenticated remote user with low privileges can change the password of any user in the same accoun…

    MB connect line Helmholz mymbCONNECT24 mbCONNECT24
  • Medium 5.3
    CVE-2022-22520

    User enumeration vulnerability in MB connect line and Helmholz products

    A remote, unauthenticated attacker can enumerate valid users by sending specific requests to the webservice of MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2.

    MB connect line Helmholz mymbCONNECT24 mbCONNECT24
  • Medium 4.3
    CVE-2021-34574

    Password policy evasion in products of MB connect line and Helmholz

    In MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 an authenticated attacker can change the password of his account into a new password that violates the password policy by intercepting and m…

    MB connect line Helmholz mymbCONNECT24 mbCONNECT24
  • Medium 6.5
    CVE-2020-12527

    Improper Access Validation in products of MB connect line and Helmholz

    An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. Improper access validation allows a logged in user to shutdown or reboot devices in his account without having corr…

    MB connect line Helmholz mymbCONNECT24 mbCONNECT24