Code injection

2023-08-1714:15:00

PRIOn knowledge base

www.prio-n.com

vulnerability

red lion europe

mbnet

helmholz rex

firmware

code injection

xss

nvd

5.3 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.0%

JSON

A vulnerability in Red Lion Europe mbNET/mbNET.rokey and Helmholz REX 200 and REX 250 devices with firmware lower 7.3.2 allows an
authenticated remote attacker with high privileges to inject malicious HTML or JavaScript code (XSS).

CPENameOperatorVersion
rex_200_firmwarelt7.3.2
rex_250_firmwarelt7.3.2
mbnet.rokey_rkh_210_firmwarelt7.3.2
mbnet.rokey_rkh_216_firmwarelt7.3.2
mbnet.rokey_rkh_235_firmwarelt7.3.2
mbnet.rokey_rkh_259_firmwarelt7.3.2
mbnet_mdh_811_firmwarelt7.3.2
mbnet_mdh_816_firmwarelt7.3.2
mbnet_mdh_831_firmwarelt7.3.2
mbnet_mdh_835_firmwarelt7.3.2

Name	Operator	Version
rex_200_firmware	lt	7.3.2
rex_250_firmware	lt	7.3.2
mbnet.rokey_rkh_210_firmware	lt	7.3.2
mbnet.rokey_rkh_216_firmware	lt	7.3.2
mbnet.rokey_rkh_235_firmware	lt	7.3.2
mbnet.rokey_rkh_259_firmware	lt	7.3.2
mbnet_mdh_811_firmware	lt	7.3.2
mbnet_mdh_816_firmware	lt	7.3.2
mbnet_mdh_831_firmware	lt	7.3.2
mbnet_mdh_835_firmware	lt	7.3.2