CVE-2024-45273

🗓️ 15 Oct 2024 10:27:52Reported by CERTVDEType

Weak encryption compromising devic

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2024-45273	15 Oct 202414:25	–	circl
CNNVD	Helmholz REX100 安全漏洞	15 Oct 202400:00	–	cnnvd
Cvelist	CVE-2024-45273 MB connect line/Helmholz: Weak encryption of configuration file	15 Oct 202410:27	–	cvelist
EUVD	EUVD-2024-41406	3 Oct 202520:07	–	euvd
NVD	CVE-2024-45273	15 Oct 202411:15	–	nvd
OSV	CVE-2024-45273	15 Oct 202411:15	–	osv
Vulnrichment	CVE-2024-45273 MB connect line/Helmholz: Weak encryption of configuration file	15 Oct 202410:27	–	vulnrichment

NVD

Vulners

Vulnrichment

Node

mbconnectline mbnet.mini_firmwareRange<2.3.1

AND

mbconnectline mbnet.miniMatch-

Node

helmholz myrex24_v2_virtual_serverRange<2.16.3

Node

helmholz rex_300_firmwareRange≤5.1.11

AND

helmholz rex_300Match-

Node

helmholz rex_200_firmwareRange<8.2.1

AND

helmholz rex_200Match-

Node

helmholz rex_250_firmwareRange<8.2.1

AND

helmholz rex_250Match-

Node

helmholz rex_100_firmwareRange<2.3.1

AND

helmholz rex_100Match-

Node

mbconnectline mbconnect24Range<2.16.3

mbconnectline mymbconnect24Range<2.16.3

Node

mbconnectline mbspider_mdh_905_firmwareRange≤2.6.5

AND

mbconnectline mbspider_mdh_905Match-

Node

mbconnectline mbspider_mdh_915_firmwareRange≤2.6.5

AND

mbconnectline mbspider_mdh_915Match-

Node

mbconnectline mbspider_mdh_906_firmwareRange≤2.6.5

AND

mbconnectline mbspider_mdh_906Match-

Node

mbconnectline mbspider_mdh_916_firmwareRange≤2.6.5

AND

mbconnectline mbspider_mdh_916Match-

Node

mbconnectline mbnet_hw1_firmwareRange≤5.1.11

AND

mbconnectline mbnet_hw1Match-

Node

mbconnectline mbnet_firmwareRange<8.2.1

AND

mbconnectline mbnetMatch-

Node

mbconnectline mbnet.rokey_firmwareRange<8.2.1

AND

mbconnectline mbnet.rokeyMatch-

[
  {
    "defaultStatus": "unaffected",
    "product": "mbNET.mini",
    "vendor": "MB connect line",
    "versions": [
      {
        "lessThanOrEqual": "2.2.13",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "mbNET/mbNET.rokey",
    "vendor": "MB connect line",
    "versions": [
      {
        "lessThanOrEqual": "8.2.0",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "mbNET HW1",
    "vendor": "MB connect line",
    "versions": [
      {
        "lessThanOrEqual": "5.1.11",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "mbSPIDER",
    "vendor": "MB connect line",
    "versions": [
      {
        "lessThanOrEqual": "2.6.5",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "mbCONNECT24",
    "vendor": "MB connect line",
    "versions": [
      {
        "lessThanOrEqual": "2.16.2",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "mymbCONNECT24",
    "vendor": "MB connect line",
    "versions": [
      {
        "lessThanOrEqual": "2.16.2",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "REX100",
    "vendor": "Helmholz",
    "versions": [
      {
        "lessThanOrEqual": "<= 2.2.13",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "REX200/250",
    "vendor": "Helmholz",
    "versions": [
      {
        "lessThanOrEqual": "<= 8.2.0",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "myREX24 V2",
    "vendor": "Helmholz",
    "versions": [
      {
        "lessThanOrEqual": "<= 2.16.2",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "myREX24.virtual",
    "vendor": "Helmholz",
    "versions": [
      {
        "lessThanOrEqual": "<= 2.16.2",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "REX300",
    "vendor": "Helmholz",
    "versions": [
      {
        "lessThanOrEqual": "<= 5.1.11",
        "status": "affected",
        "version": "0.0.0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
cert	www.cert.vde.com/en/advisories/VDE-2024-069
cert	www.cert.vde.com/en/advisories/VDE-2024-068
cert	www.cert.vde.com/en/advisories/VDE-2024-056
cert	www.cert.vde.com/en/advisories/VDE-2024-066
syss	www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-062.txt

21 Nov 2024 09:37Current

8High risk

Vulners AI Score8

CVSS 3.17.8 - 8.4

EPSS0.00087

SSVC

cve-2024-45273 mb connect line/helmholz configuration file unauthenticated attacker encryption weakness