Description (CNA)
An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| MB connect line / mbNET.mini | affected 0.0.0 through 2.2.13 |
| MB connect line / mbNET/mbNET.rokey | affected 0.0.0 through 8.2.0 |
| MB connect line / mbNET HW1 | affected 0.0.0 through 5.1.11 |
| MB connect line / mbSPIDER | affected 0.0.0 through 2.6.5 |
| MB connect line / mbCONNECT24 | affected 0.0.0 through 2.16.2 |
| MB connect line / mymbCONNECT24 | affected 0.0.0 through 2.16.2 |
| Helmholz / REX100 | affected 0.0.0 through <= 2.2.13 |
| Helmholz / REX200/250 | affected 0.0.0 through <= 8.2.0 |
| Helmholz / myREX24 V2 | affected 0.0.0 through <= 2.16.2 |
| Helmholz / myREX24.virtual | affected 0.0.0 through <= 2.16.2 |
| Helmholz / REX300 | affected 0.0.0 through <= 5.1.11 |
CWE
CWE-261
References
- https://cert.vde.com/en/advisories/VDE-2024-056
- https://cert.vde.com/en/advisories/VDE-2024-066
- https://cert.vde.com/en/advisories/VDE-2024-068
- https://cert.vde.com/en/advisories/VDE-2024-069
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.