Description
An unauthenticated remote attacker can obtain limited sensitive information and/or DoS the device due to missing authentication for critical function.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MB connect line | mbCONNECT24 | < 2.18.0 | 2.18.0 |
| MB connect line | mymbCONNECT24 | < 2.18.0 | 2.18.0 |
| Helmholz | myREX24 | < 2.18.0 | 2.18.0 |
| Helmholz | myREX24.virtual | < 2.18.0 | 2.18.0 |
Advisories 2
- VDE-2025-037 Vulnerabilities in myREX24/myREX24.virtual CERT@VDE · Jun 24, 2025
- VDE-2025-034 Vulnerabilities in mbCONNECT24/mymbCONNECT24 CERT@VDE · Jun 24, 2025