Login Request a demo
Medium severity · published Aug 17, 2023
CVE-2023-34412
A vulnerability in Red Lion Europe mbNET/mbNET.rokey and Helmholz REX 200 and REX 250 devices with firmware lower 7.3.2 allows an authenticated remote attacker with high…
4.8
CVSS
0.4%
EPSS
No
On KEV
Description
A vulnerability in Red Lion Europe mbNET/mbNET.rokey and Helmholz REX 200 and REX 250 devices with firmware lower 7.3.2 allows an authenticated remote attacker with high privileges to inject malicious HTML or JavaScript code (XSS).
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 37% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MM
Mbnet Mdh 811 Firmware · Redlion
before 7.3.2 · source: NVD
MM
Mbnet Mdh 816 Firmware · Redlion
before 7.3.2 · source: NVD
MM
Mbnet Mdh 831 Firmware · Redlion
before 7.3.2 · source: NVD
MM
Mbnet Mdh 835 Firmware · Redlion
before 7.3.2 · source: NVD
MM
Mbnet Mdh 841 Firmware · Redlion
before 7.3.2 · source: NVD
MM
Mbnet Mdh 850 Firmware · Redlion
before 7.3.2 · source: NVD
MM
Mbnet Mdh 855 Firmware · Redlion
before 7.3.2 · source: NVD
MM
Mbnet Mdh 858 Firmware · Redlion
before 7.3.2 · source: NVD
MM
Mbnet Mdh 859 Firmware · Redlion
before 7.3.2 · source: NVD
MM
Mbnet Mdh 871 Firmware · Redlion
before 7.3.2 · source: NVD
MM
Mbnet Mdh 876 Firmware · Redlion
before 7.3.2 · source: NVD
MR
Mbnet.rokey Rkh 210 Firmware · Redlion
before 7.3.2 · source: NVD
Affected product
R2
Rex 200 Firmware
Helmholz
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-34412
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-34412
Third Party Advisory
https://cert.vde.com/en/advisories/VDE-2023-012/
Third Party Advisory
https://cert.vde.com/en/advisories/VDE-2023-029/
More from Rex 200 Firmware
7.8
CVE-2024-45273
An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used
7.5
CVE-2024-45272
An unauthenticated remote attacker can perform a brute-force attack on the credentials of the remote service portal with a high chance of success, resulting in connection lost