CVE-2024-45272

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-45272
An unauthenticated remote attacker can perform a brute-force attack on the credentials of the remote service portal with a high chance of success, resulting in connection lost.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://cert.vde.com/en/advisories/VDE-2024-068 Third Party Advisory
https://cert.vde.com/en/advisories/VDE-2024-069 Third Party Advisory
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-061.txt
Configurations

Configuration 1 (hide)

cpe:2.3:a:helmholz:myrex24_v2_virtual_server:*:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:helmholz:rex_300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:helmholz:rex_300:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:helmholz:rex_200_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:helmholz:rex_200:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:helmholz:rex_250_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:helmholz:rex_250:-:*:*:*:*:*:*:*

Configuration 5 (hide)

OR cpe:2.3:a:mbconnectline:mbconnect24:*:*:*:*:*:*:*:*
cpe:2.3:a:mbconnectline:mymbconnect24:*:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:mbconnectline:mbspider_mdh_905_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:mbconnectline:mbspider_mdh_905:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:mbconnectline:mbspider_mdh_915_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:mbconnectline:mbspider_mdh_915:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:mbconnectline:mbspider_mdh_906_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:mbconnectline:mbspider_mdh_906:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:mbconnectline:mbspider_mdh_916_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:mbconnectline:mbspider_mdh_916:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:mbconnectline:mbnet_hw1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:mbconnectline:mbnet_hw1:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:mbconnectline:mbnet_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:mbconnectline:mbnet:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:mbconnectline:mbnet.rokey_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:mbconnectline:mbnet.rokey:-:*:*:*:*:*:*:*
History

21 Nov 2024, 09:37

Type Values Removed Values Added
References
  • () https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-061.txt -

17 Oct 2024, 17:42

Type Values Removed Values Added
References () https://cert.vde.com/en/advisories/VDE-2024-068 - () https://cert.vde.com/en/advisories/VDE-2024-068 - Third Party Advisory
References () https://cert.vde.com/en/advisories/VDE-2024-069 - () https://cert.vde.com/en/advisories/VDE-2024-069 - Third Party Advisory
CPE cpe:2.3:o:mbconnectline:mbnet_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:mbconnectline:mbspider_mdh_916:-:*:*:*:*:*:*:*
cpe:2.3:o:helmholz:rex_200_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mbconnectline:mbspider_mdh_916_firmware:*:*:*:*:*:*:*:*
cpe:2.3:a:mbconnectline:mbconnect24:*:*:*:*:*:*:*:*
cpe:2.3:o:mbconnectline:mbnet_hw1_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mbconnectline:mbnet.rokey_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:helmholz:rex_250_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:helmholz:rex_250:-:*:*:*:*:*:*:*
cpe:2.3:h:mbconnectline:mbnet_hw1:-:*:*:*:*:*:*:*
cpe:2.3:o:mbconnectline:mbspider_mdh_905_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:helmholz:rex_300_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:mbconnectline:mbspider_mdh_915_firmware:*:*:*:*:*:*:*:*
cpe:2.3:a:mbconnectline:mymbconnect24:*:*:*:*:*:*:*:*
cpe:2.3:h:mbconnectline:mbspider_mdh_915:-:*:*:*:*:*:*:*
cpe:2.3:h:mbconnectline:mbspider_mdh_905:-:*:*:*:*:*:*:*
cpe:2.3:h:helmholz:rex_200:-:*:*:*:*:*:*:*
cpe:2.3:o:mbconnectline:mbspider_mdh_906_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:mbconnectline:mbnet:-:*:*:*:*:*:*:*
cpe:2.3:h:mbconnectline:mbnet.rokey:-:*:*:*:*:*:*:*
cpe:2.3:h:mbconnectline:mbspider_mdh_906:-:*:*:*:*:*:*:*
cpe:2.3:h:helmholz:rex_300:-:*:*:*:*:*:*:*
cpe:2.3:a:helmholz:myrex24_v2_virtual_server:*:*:*:*:*:*:*:*
Summary
  • (es) Un atacante remoto no autenticado puede realizar un ataque de fuerza bruta a las credenciales del portal de servicio remoto con una alta probabilidad de éxito, lo que da como resultado la pérdida de la conexión.
CWE NVD-CWE-Other
First Time Mbconnectline
Mbconnectline mbspider Mdh 906 Firmware
Mbconnectline mbspider Mdh 905
Mbconnectline mbspider Mdh 906
Mbconnectline mbnet Hw1 Firmware
Mbconnectline mbspider Mdh 916 Firmware
Mbconnectline mbnet Firmware
Mbconnectline mbspider Mdh 905 Firmware
Mbconnectline mymbconnect24
Helmholz rex 300
Mbconnectline mbconnect24
Mbconnectline mbnet.rokey
Helmholz rex 250 Firmware
Mbconnectline mbnet
Mbconnectline mbspider Mdh 916
Helmholz rex 250
Helmholz rex 300 Firmware
Helmholz rex 200 Firmware
Mbconnectline mbnet.rokey Firmware
Mbconnectline mbnet Hw1
Helmholz myrex24 V2 Virtual Server
Mbconnectline mbspider Mdh 915
Mbconnectline mbspider Mdh 915 Firmware
Helmholz rex 200
Helmholz

15 Oct 2024, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-15 11:15

Updated : 2024-11-21 09:37

NVD link : CVE-2024-45272

Mitre link : CVE-2024-45272

CVE.ORG link : CVE-2024-45272

JSON object : View

Products Affected

helmholz

  • rex_300_firmware
  • rex_200
  • rex_250
  • myrex24_v2_virtual_server
  • rex_250_firmware
  • rex_200_firmware
  • rex_300

mbconnectline

  • mbnet_firmware
  • mbspider_mdh_906
  • mbconnect24
  • mbnet
  • mbspider_mdh_916_firmware
  • mbspider_mdh_905_firmware
  • mbspider_mdh_905
  • mbnet_hw1_firmware
  • mbnet.rokey_firmware
  • mbnet_hw1
  • mbspider_mdh_916
  • mbnet.rokey
  • mbspider_mdh_906_firmware
  • mymbconnect24
  • mbspider_mdh_915_firmware
  • mbspider_mdh_915
CWE
CWE-1391

Use of Weak Credentials

NVD-CWE-Other