Description
An unauthenticated remote attacker can perform a brute-force attack on the credentials of the remote service portal with a high chance of success, resulting in connection lost.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MB connect line | mbCONNECT24 | 0.0.0 – ≤ 2.16.2 | — |
| MB connect line | mymbCONNECT24 | 0.0.0 – ≤ 2.16.2 | — |
| Helmholz | myREX24 V2 | 0.0.0 – ≤ 2.16.2 | — |
| Helmholz | myREX24.virtual | 0.0.0 – ≤ 2.16.2 | — |
Advisories 2
- VDE-2024-069 Helmholz: Multiple Vulnerabilities in Helmholz products CERT@VDE · Mar 6, 2026
- VDE-2024-068 MB connect line: Multiple Vulnerabilities in MB connect line Products CERT@VDE · Mar 6, 2026