Helmholz records
18 published records for vendor helmholz.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 5.6%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-269 Improper Privilege Management3
- CWE-306 Missing Authentication for Critical Function2
- CWE-918 Server-Side Request Forgery (SSRF)2
- CWE-261 Weak Encoding for Password1
- CWE-425 Direct Request ('Forced Browsing')1
- CWE-669 Incorrect Resource Transfer Between Spheres1
The weakness classes this vendor ships most often: where to look.
CWEAll records
18 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2024-45274No exploit | MB connect line/Helmholz: Remote code execution via confnet servicembconnectline · mbnet.mini firmware · CWE-306 | Critical9.8 | — | 1.5% | Oct 15, 2024 |
39Monitor | CVE-2024-45275No exploit | MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwordsmbconnectline · mbnet.mini firmware · CWE-798 | Critical9.8 | — | 0.8% | Oct 15, 2024 |
31Monitor | CVE-2024-45271No exploit | MB connect line/Helmholz: Remote code execution due to improper input validationmbconnectline · mbnet.mini firmware · CWE-94 | High7.8 | — | 0.3% | Oct 15, 2024 |
31Monitor | CVE-2024-45273No exploit | MB connect line/Helmholz: Weak encryption of configuration filembconnectline · mbnet.mini firmware · CWE-261 | High7.8 | — | 0.0% | Oct 15, 2024 |
30Monitor | CVE-2020-35558No exploit | SSRF in products of MB connect line and Helmholzhelmholz · myrex24 · CWE-918 | High7.5 | — | 1.4% | Feb 16, 2021 |
30Monitor | CVE-2024-45276No exploit | MB connect line/Helmholz: tmp directory exposed via webservicembconnectline · mbnet.mini firmware · CWE-306 | High7.5 | — | 0.6% | Oct 15, 2024 |
30Monitor | CVE-2024-45272No exploit | MB connect line/Helmholz: Generation of weak passwords vulnerabilityhelmholz · myrex24 v2 virtual server · CWE-1391 | High7.5 | — | 0.6% | Oct 15, 2024 |
28Monitor | CVE-2024-5672No exploit | Red Lion Europe: mbNET.mini vulnerable to OS command injectionred lion europe · mbnet.mini · CWE-78 | High7.2 | — | 1.2% | Jul 3, 2024 |
26Monitor | CVE-2020-12527No exploit | Improper Access Validation in products of MB connect line and Helmholzhelmholz · myrex24 · CWE-269 | Medium6.5 | — | 1.0% | Mar 2, 2021 |
26Monitor | CVE-2020-35557No exploit | Improper Access Validation in products of MB connect line and Helmholzhelmholz · myrex24 · CWE-269 | Medium6.5 | — | 1.0% | Feb 16, 2021 |
21Monitor | CVE-2020-35570No exploit | Foreced Browsing vulnerability in products of MB connect line and Helmholzhelmholz · myrex24 · CWE-425 | Medium5.3 | — | 1.2% | Feb 16, 2021 |
21Monitor | CVE-2020-35566No exploit | Local file inclusion vulnerability in products of MB connect line and Helmholzhelmholz · myrex24 · CWE-706 | Medium5.3 | — | 1.2% | Feb 16, 2021 |
21Monitor | CVE-2020-35561No exploit | SSRF in variuos products of MB connect line and Helmholzhelmholz · myrex24 · CWE-918 | Medium5.3 | — | 1.2% | Feb 16, 2021 |
21Monitor | CVE-2022-22520No exploit | User enumeration vulnerability in MB connect line and Helmholz productsmbconnectline · mbconnect24 · CWE-204 | Medium5.3 | — | 1.0% | Sep 14, 2022 |
19Monitor | CVE-2023-34412No exploit | Stored XXS vulnerability in mbnet, mbnet.rokey, REX 200 and REX 250helmholz · rex 250 firmware · CWE-79 | Medium4.8 | — | 0.4% | Aug 17, 2023 |
17Monitor | CVE-2020-35568No exploit | Sensitive Information Exposure in products of MB connect line and Helmholzhelmholz · myrex24 · CWE-200 | Medium4.3 | — | 0.9% | Feb 16, 2021 |
17Monitor | CVE-2021-34574No exploit | Password policy evasion in products of MB connect line and Helmholzhelmholz · myrex24 · CWE-669 | Medium4.3 | — | 0.6% | Aug 2, 2021 |
17Monitor | CVE-2023-4834No exploit | In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implementhelmholz · myrex24 · CWE-269 | Medium4.3 | — | 0.3% | Oct 16, 2023 |
- CVE-2024-4527439Monitor
MB connect line/Helmholz: Remote code execution via confnet service
CriticalCVSS 9.8No exploitEPSS 1%mbconnectline · mbnet.mini firmwareOct 15, 2024
- CVE-2024-4527539Monitor
MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords
CriticalCVSS 9.8No exploitEPSS 0%mbconnectline · mbnet.mini firmwareOct 15, 2024
- CVE-2024-4527131Monitor
MB connect line/Helmholz: Remote code execution due to improper input validation
HighCVSS 7.8No exploitEPSS 0%mbconnectline · mbnet.mini firmwareOct 15, 2024
- CVE-2024-4527331Monitor
MB connect line/Helmholz: Weak encryption of configuration file
HighCVSS 7.8No exploitEPSS 0%mbconnectline · mbnet.mini firmwareOct 15, 2024
- CVE-2020-3555830Monitor
SSRF in products of MB connect line and Helmholz
HighCVSS 7.5No exploitEPSS 1%helmholz · myrex24Feb 16, 2021
- CVE-2024-4527630Monitor
MB connect line/Helmholz: tmp directory exposed via webservice
HighCVSS 7.5No exploitEPSS 0%mbconnectline · mbnet.mini firmwareOct 15, 2024
- CVE-2024-4527230Monitor
MB connect line/Helmholz: Generation of weak passwords vulnerability
HighCVSS 7.5No exploitEPSS 0%helmholz · myrex24 v2 virtual serverOct 15, 2024
- CVE-2024-567228Monitor
Red Lion Europe: mbNET.mini vulnerable to OS command injection
HighCVSS 7.2No exploitEPSS 1%red lion europe · mbnet.miniJul 3, 2024
- CVE-2020-1252726Monitor
Improper Access Validation in products of MB connect line and Helmholz
MediumCVSS 6.5No exploitEPSS 1%helmholz · myrex24Mar 2, 2021
- CVE-2020-3555726Monitor
Improper Access Validation in products of MB connect line and Helmholz
MediumCVSS 6.5No exploitEPSS 1%helmholz · myrex24Feb 16, 2021
- CVE-2020-3557021Monitor
Foreced Browsing vulnerability in products of MB connect line and Helmholz
MediumCVSS 5.3No exploitEPSS 1%helmholz · myrex24Feb 16, 2021
- CVE-2020-3556621Monitor
Local file inclusion vulnerability in products of MB connect line and Helmholz
MediumCVSS 5.3No exploitEPSS 1%helmholz · myrex24Feb 16, 2021
- CVE-2020-3556121Monitor
SSRF in variuos products of MB connect line and Helmholz
MediumCVSS 5.3No exploitEPSS 1%helmholz · myrex24Feb 16, 2021
- CVE-2022-2252021Monitor
User enumeration vulnerability in MB connect line and Helmholz products
MediumCVSS 5.3No exploitEPSS 1%mbconnectline · mbconnect24Sep 14, 2022
- CVE-2023-3441219Monitor
Stored XXS vulnerability in mbnet, mbnet.rokey, REX 200 and REX 250
MediumCVSS 4.8No exploitEPSS 0%helmholz · rex 250 firmwareAug 17, 2023
- CVE-2020-3556817Monitor
Sensitive Information Exposure in products of MB connect line and Helmholz
MediumCVSS 4.3No exploitEPSS 0%helmholz · myrex24Feb 16, 2021
- CVE-2021-3457417Monitor
Password policy evasion in products of MB connect line and Helmholz
MediumCVSS 4.3No exploitEPSS 0%helmholz · myrex24Aug 2, 2021
- CVE-2023-483417Monitor
In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implement
MediumCVSS 4.3No exploitEPSS 0%helmholz · myrex24Oct 16, 2023