Lucene search

CERTVDECVELIST:CVE-2023-4834

HistoryOct 16, 2023 - 8:40 a.m.

CVE-2023-4834

2023-10-1608:40:13

CWE-269

CERTVDE

www.cve.org

red lion europe

mbconnect24

helmholz

myrex24

vulnerability

unauthorized access

information security

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.0%

JSON

In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implemented access validation allows an authenticated, low privileged attacker to gain read access to limited, non-critical device information in his account he should not have access to.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "mbCONNECT24",
    "vendor": "Red Lion Europe",
    "versions": [
      {
        "lessThanOrEqual": "2.14.2",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "mymbCONNECT24",
    "vendor": "Red Lion Europe",
    "versions": [
      {
        "lessThanOrEqual": "2.14.2",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "myREX24",
    "vendor": "Helmholz",
    "versions": [
      {
        "lessThanOrEqual": "2.14.2",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "myREX24.virtual",
    "vendor": "Helmholz",
    "versions": [
      {
        "lessThanOrEqual": "2.14.2",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

References

cert.vde.com/en/advisories/VDE-2023-041

cert.vde.com/en/advisories/VDE-2023-043

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

4.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.0%

JSON

Related for CVELIST:CVE-2023-4834