Skip to content
OpenAdvisories
Medium · 4.8 CVE-2023-34412 EUVD-2023-38489GHSA-wrhq-63m5-3pfr

Stored XXS vulnerability in mbnet, mbnet.rokey, REX 200 and REX 250

Published Aug 17, 2023 · Updated Aug 2, 2024 · Assigned by CERTVDE

Vendor: Helmholz Vendor: Red Lion Europe Product: mbNET Product: mbNET.rokey Product: REX 200 Product: REX 250

Description

A vulnerability in Red Lion Europe mbNET/mbNET.rokey and Helmholz REX 200 and REX 250 devices with firmware lower 7.3.2 allows an
authenticated remote attacker with high privileges to inject malicious HTML or JavaScript code (XSS).

Affected products

VendorProductAffectedFixed
Red Lion Europe mbNET < 7.3.2 7.3.2
Red Lion Europe mbNET.rokey < 7.3.2 7.3.2
Helmholz REX 200 < 7.3.2 7.3.2
Helmholz REX 250 < 7.3.2 7.3.2

References