The devices contain two hard coded user accounts with hardcoded passwords that allow an unauthenticated remote attacker for full control of the affected devices.
2024-10-15T11:15:12.487
2024-11-21T09:37:35.750
Modified
CVSSv3.1: 9.8 (CRITICAL)
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Operating System | mbconnectline | mbnet.mini_firmware | < 2.3.1 | Yes |
Hardware | mbconnectline | mbnet.mini | - | No |
Operating System | helmholz | rex_100_firmware | < 2.3.1 | Yes |
Hardware | helmholz | rex_100 | - | No |