ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2024-45273

—
CVSS 3.1
7.8 high
EPSS
<1%p1
Published
()
Modified
Description

An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used.

Vendors
mbconnectlinehelmholz
Products
mbnet.mini firmware, myrex24 v2 virtual server, rex 300 firmware, rex 200 firmware, rex 250 firmware, rex 100 firmware, mbconnect24, mymbconnect24, mbspider mdh 905 firmware, mbspider mdh 915 firmware, mbspider mdh 906 firmware, mbspider mdh 916 firmware
Weakness
CWE-261, CWE-326
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news

No ingested article mentions this CVE yet.