Advisories · Technology

Helmholz myREX24.virtual.

Every CVE that names Helmholz myREX24.virtual among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-3092 CVE record

CVSS 7.5 High

MB connect line: Observable response discrepancy in mbCONNECT24/mymbCONNECT24
- Helmholz myREX24
- Helmholz myREX24.virtual
- CWE-204
Not analysed yet 24 Jun 2025
CVE-2025-3091 CVE record

CVSS 7.5 High

MB connect line: Authorization bypass in mbCONNECT24/mymbCONNECT24
- MB connect line mbCONNECT24
- MB connect line mymbCONNECT24
- Broken access control
Not analysed yet 24 Jun 2025
CVE-2025-3090 CVE record

CVSS 8.2 High

MB connect line: Missing Authentication in mbCONNECT24/mymbCONNECT24
- MB connect line mbCONNECT24
- MB connect line mymbCONNECT24
- Authentication bypass
Not analysed yet 24 Jun 2025
CVE-2024-45273 CVE record

CVSS 8.4 High

MB connect line/Helmholz: Weak encryption of configuration file
- MB connect line mbNET.mini
- MB connect line mbNET/mbNET.rokey
- CWE-261
Not analysed yet 15 Oct 2024
CVE-2024-45272 CVE record

CVSS 7.5 High

MB connect line/Helmholz: Generation of weak passwords vulnerability
- MB connect line mbCONNECT24
- MB connect line mymbCONNECT24
- Hard-coded credentials
Not analysed yet 15 Oct 2024
CVE-2023-4834 CVE record

CVSS 4.3 Medium

Improper privilege management in Red Lion Europe mbCONNECT24 and others
- Red Lion Europe mbCONNECT24
- Red Lion Europe mymbCONNECT24
- Privilege escalation
Not analysed yet 16 Oct 2023
CVE-2023-1779 CVE record

CVSS 4.3 Medium

Helmholz and MB Connect Line: Account takeover via password reset in multiple products
- MB Connect Line mbCONNECT24
- MB Connect Line mymbCONNECT24
- Broken access control
Not analysed yet 6 Jun 2023
CVE-2023-0985 CVE record

CVSS 8.8 High

Helmholz and MB Connect Line: Account takeover via password reset in multiple products
- MB Connect Line mbCONNECT24
- MB Connect Line mymbCONNECT24
- Broken access control
Not analysed yet 6 Jun 2023
CVE-2022-22520 CVE record

CVSS 5.3 Medium

User enumeration vulnerability in MB connect line and Helmholz products
- MB connect line mymbCONNECT24
- MB connect line mbCONNECT24
- CWE-204
Not analysed yet 14 Sept 2022
CVE-2021-34574 CVE record

CVSS 4.3 Medium

Password policy evasion in products of MB connect line and Helmholz
- MB connect line mymbCONNECT24
- MB connect line mbCONNECT24
- CWE-669
Not analysed yet 2 Aug 2021
CVE-2020-12527 CVE record

CVSS 6.5 Medium

Improper Access Validation in products of MB connect line and Helmholz
- MB connect line mymbCONNECT24
- MB connect line mbCONNECT24
- Privilege escalation
Not analysed yet 2 Mar 2021