Description
The devices contain two hard coded user accounts with hardcoded passwords that allow an unauthenticated remote attacker for full control of the affected devices.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MB connect line | mbNET.mini | 0.0.0 – ≤ 2.2.13 | — |
| Helmholz | REX100 | 0.0.0 – ≤ 2.2.13 | — |
Advisories 4
- VDE-2024-069 Helmholz: Multiple Vulnerabilities in Helmholz products CERT@VDE · Mar 6, 2026
- VDE-2024-068 MB connect line: Multiple Vulnerabilities in MB connect line Products CERT@VDE · Mar 6, 2026
- VDE-2024-066 Helmholz: Multiple Vulnerabilities in Helmholz REX100 Product CERT@VDE · Aug 27, 2025
- VDE-2024-056 MB connect line: Multiple Vulnerabilities in mbNET.mini Product CERT@VDE · Aug 27, 2025