Helmholz kayıtları
helmholz üreticisine ait 18 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %5,6
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-269 Improper Privilege Management3
- CWE-306 Missing Authentication for Critical Function2
- CWE-918 Server-Side Request Forgery (SSRF)2
- CWE-261 Weak Encoding for Password1
- CWE-425 Direct Request ('Forced Browsing')1
- CWE-669 Incorrect Resource Transfer Between Spheres1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
18 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-45274İstismar yok | MB connect line/Helmholz: Remote code execution via confnet servicembconnectline · mbnet.mini firmware · CWE-306 | Kritik9,8 | — | %1,5 | 15 Eki 2024 |
39İzleyin | CVE-2024-45275İstismar yok | MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwordsmbconnectline · mbnet.mini firmware · CWE-798 | Kritik9,8 | — | %0,8 | 15 Eki 2024 |
31İzleyin | CVE-2024-45271İstismar yok | MB connect line/Helmholz: Remote code execution due to improper input validationmbconnectline · mbnet.mini firmware · CWE-94 | Yüksek7,8 | — | %0,3 | 15 Eki 2024 |
31İzleyin | CVE-2024-45273İstismar yok | MB connect line/Helmholz: Weak encryption of configuration filembconnectline · mbnet.mini firmware · CWE-261 | Yüksek7,8 | — | %0,1 | 15 Eki 2024 |
30İzleyin | CVE-2020-35558İstismar yok | SSRF in products of MB connect line and Helmholzhelmholz · myrex24 · CWE-918 | Yüksek7,5 | — | %1,5 | 16 Şub 2021 |
30İzleyin | CVE-2024-45276İstismar yok | MB connect line/Helmholz: tmp directory exposed via webservicembconnectline · mbnet.mini firmware · CWE-306 | Yüksek7,5 | — | %0,6 | 15 Eki 2024 |
30İzleyin | CVE-2024-45272İstismar yok | MB connect line/Helmholz: Generation of weak passwords vulnerabilityhelmholz · myrex24 v2 virtual server · CWE-1391 | Yüksek7,5 | — | %0,6 | 15 Eki 2024 |
28İzleyin | CVE-2024-5672İstismar yok | Red Lion Europe: mbNET.mini vulnerable to OS command injectionred lion europe · mbnet.mini · CWE-78 | Yüksek7,2 | — | %1,2 | 3 Tem 2024 |
26İzleyin | CVE-2020-12527İstismar yok | Improper Access Validation in products of MB connect line and Helmholzhelmholz · myrex24 · CWE-269 | Orta6,5 | — | %1,0 | 2 Mar 2021 |
26İzleyin | CVE-2020-35557İstismar yok | Improper Access Validation in products of MB connect line and Helmholzhelmholz · myrex24 · CWE-269 | Orta6,5 | — | %1,0 | 16 Şub 2021 |
21İzleyin | CVE-2020-35570İstismar yok | Foreced Browsing vulnerability in products of MB connect line and Helmholzhelmholz · myrex24 · CWE-425 | Orta5,3 | — | %1,2 | 16 Şub 2021 |
21İzleyin | CVE-2020-35566İstismar yok | Local file inclusion vulnerability in products of MB connect line and Helmholzhelmholz · myrex24 · CWE-706 | Orta5,3 | — | %1,2 | 16 Şub 2021 |
21İzleyin | CVE-2020-35561İstismar yok | SSRF in variuos products of MB connect line and Helmholzhelmholz · myrex24 · CWE-918 | Orta5,3 | — | %1,2 | 16 Şub 2021 |
21İzleyin | CVE-2022-22520İstismar yok | User enumeration vulnerability in MB connect line and Helmholz productsmbconnectline · mbconnect24 · CWE-204 | Orta5,3 | — | %1,0 | 14 Eyl 2022 |
19İzleyin | CVE-2023-34412İstismar yok | Stored XXS vulnerability in mbnet, mbnet.rokey, REX 200 and REX 250helmholz · rex 250 firmware · CWE-79 | Orta4,8 | — | %0,4 | 17 Ağu 2023 |
17İzleyin | CVE-2020-35568İstismar yok | Sensitive Information Exposure in products of MB connect line and Helmholzhelmholz · myrex24 · CWE-200 | Orta4,3 | — | %1,0 | 16 Şub 2021 |
17İzleyin | CVE-2021-34574İstismar yok | Password policy evasion in products of MB connect line and Helmholzhelmholz · myrex24 · CWE-669 | Orta4,3 | — | %0,7 | 2 Ağu 2021 |
17İzleyin | CVE-2023-4834İstismar yok | In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implementhelmholz · myrex24 · CWE-269 | Orta4,3 | — | %0,3 | 16 Eki 2023 |
- CVE-2024-4527439İzleyin
MB connect line/Helmholz: Remote code execution via confnet service
KritikCVSS 9,8İstismar yokEPSS %2mbconnectline · mbnet.mini firmware15 Eki 2024
- CVE-2024-4527539İzleyin
MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords
KritikCVSS 9,8İstismar yokEPSS %1mbconnectline · mbnet.mini firmware15 Eki 2024
- CVE-2024-4527131İzleyin
MB connect line/Helmholz: Remote code execution due to improper input validation
YüksekCVSS 7,8İstismar yokEPSS %0mbconnectline · mbnet.mini firmware15 Eki 2024
- CVE-2024-4527331İzleyin
MB connect line/Helmholz: Weak encryption of configuration file
YüksekCVSS 7,8İstismar yokEPSS %0mbconnectline · mbnet.mini firmware15 Eki 2024
- CVE-2020-3555830İzleyin
SSRF in products of MB connect line and Helmholz
YüksekCVSS 7,5İstismar yokEPSS %1helmholz · myrex2416 Şub 2021
- CVE-2024-4527630İzleyin
MB connect line/Helmholz: tmp directory exposed via webservice
YüksekCVSS 7,5İstismar yokEPSS %1mbconnectline · mbnet.mini firmware15 Eki 2024
- CVE-2024-4527230İzleyin
MB connect line/Helmholz: Generation of weak passwords vulnerability
YüksekCVSS 7,5İstismar yokEPSS %1helmholz · myrex24 v2 virtual server15 Eki 2024
- CVE-2024-567228İzleyin
Red Lion Europe: mbNET.mini vulnerable to OS command injection
YüksekCVSS 7,2İstismar yokEPSS %1red lion europe · mbnet.mini3 Tem 2024
- CVE-2020-1252726İzleyin
Improper Access Validation in products of MB connect line and Helmholz
OrtaCVSS 6,5İstismar yokEPSS %1helmholz · myrex242 Mar 2021
- CVE-2020-3555726İzleyin
Improper Access Validation in products of MB connect line and Helmholz
OrtaCVSS 6,5İstismar yokEPSS %1helmholz · myrex2416 Şub 2021
- CVE-2020-3557021İzleyin
Foreced Browsing vulnerability in products of MB connect line and Helmholz
OrtaCVSS 5,3İstismar yokEPSS %1helmholz · myrex2416 Şub 2021
- CVE-2020-3556621İzleyin
Local file inclusion vulnerability in products of MB connect line and Helmholz
OrtaCVSS 5,3İstismar yokEPSS %1helmholz · myrex2416 Şub 2021
- CVE-2020-3556121İzleyin
SSRF in variuos products of MB connect line and Helmholz
OrtaCVSS 5,3İstismar yokEPSS %1helmholz · myrex2416 Şub 2021
- CVE-2022-2252021İzleyin
User enumeration vulnerability in MB connect line and Helmholz products
OrtaCVSS 5,3İstismar yokEPSS %1mbconnectline · mbconnect2414 Eyl 2022
- CVE-2023-3441219İzleyin
Stored XXS vulnerability in mbnet, mbnet.rokey, REX 200 and REX 250
OrtaCVSS 4,8İstismar yokEPSS %0helmholz · rex 250 firmware17 Ağu 2023
- CVE-2020-3556817İzleyin
Sensitive Information Exposure in products of MB connect line and Helmholz
OrtaCVSS 4,3İstismar yokEPSS %1helmholz · myrex2416 Şub 2021
- CVE-2021-3457417İzleyin
Password policy evasion in products of MB connect line and Helmholz
OrtaCVSS 4,3İstismar yokEPSS %1helmholz · myrex242 Ağu 2021
- CVE-2023-483417İzleyin
In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implement
OrtaCVSS 4,3İstismar yokEPSS %0helmholz · myrex2416 Eki 2023