high8.4
CVE-2024-45273
An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used.
Impact
An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mbconnectline | Mbnet.Mini Firmware | before 2.3.1 |
| Helmholz | Myrex24 V2 Virtual Server | before 2.16.3 |
| Helmholz | Rex 300 Firmware | through 5.1.11 |
| Helmholz | Rex 200 Firmware | before 8.2.1 |
| Helmholz | Rex 250 Firmware | before 8.2.1 |
| Helmholz | Rex 100 Firmware | before 2.3.1 |
| Mbconnectline | Mbconnect24 | before 2.16.3 |
| Mbconnectline | Mymbconnect24 | before 2.16.3 |
| Mbconnectline | Mbspider Mdh 905 Firmware | through 2.6.5 |
| Mbconnectline | Mbspider Mdh 915 Firmware | through 2.6.5 |
| Mbconnectline | Mbspider Mdh 906 Firmware | through 2.6.5 |
| Mbconnectline | Mbspider Mdh 916 Firmware | through 2.6.5 |