Advisories · Technology

Helmholz REX100.

Every CVE that names Helmholz REX100 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-40852 CVE record

CVSS 7.2 High

Command injection via malicious configuration
- MB connect line mbNET/mbNET.rokey
- MB connect line mbNET.mini
- Command injection
Not analysed yet 27 May 2026
CVE-2026-40851 CVE record

CVSS 8.4 High

Command injection via USB
- MB connect line mbNET/mbNET.rokey
- MB connect line mbNET.mini
- CWE-1287
Not analysed yet 27 May 2026
CVE-2024-45276 CVE record

CVSS 7.5 High

MB connect line/Helmholz: tmp directory exposed via webservice
- MB connect line mbNET.mini
- Helmholz REX100
- Authentication bypass
Not analysed yet 15 Oct 2024
CVE-2024-45275 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords
- MB connect line mbNET.mini
- Helmholz REX100
- Hard-coded credentials
Not analysed yet 15 Oct 2024
CVE-2024-45274 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

MB connect line/Helmholz: Remote code execution via confnet service
- MB connect line mbNET.mini
- Helmholz REX100
- Authentication bypass
Not analysed yet 15 Oct 2024
CVE-2024-45273 CVE record

CVSS 8.4 High

MB connect line/Helmholz: Weak encryption of configuration file
- MB connect line mbNET.mini
- MB connect line mbNET/mbNET.rokey
- CWE-261
Not analysed yet 15 Oct 2024
CVE-2024-45271 CVE record

CVSS 8.4 High

MB connect line/Helmholz: Remote code execution due to improper input validation
- MB connect line mbNET.mini
- Helmholz REX100
- Code injection
Not analysed yet 15 Oct 2024