CVE-2024-45275

CRITICAL

Helmholz REX 100 and MBConnectLine MBnet.mini Firmware <= 2.3.1 - Hardcoded Credentials

Title source: llm
STIX 2.1

Description

The devices contain two hard coded user accounts with hardcoded passwords that allow an unauthenticated remote attacker for full control of the affected devices.

References (3)

Core 3

Scores

CVSS v3 9.8
EPSS 0.0080
EPSS Percentile 51.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-798
Status published
Products (2)
helmholz/rex_100_firmware < 2.3.1
mbconnectline/mbnet.mini_firmware < 2.3.1
Published Oct 15, 2024
Tracked Since Feb 18, 2026