CVE-2024-45275 — MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords

CVE-2024-45275

MB connect line/Helmholz: Hardcoded user accounts with hard-coded passwords PUBLISHED

Description (CNA)

The devices contain two hard coded user accounts with hardcoded passwords that allow an unauthenticated remote attacker for full control of the affected devices.

Affected (CNA)

Vendor / product	Versions
MB connect line / mbNET.mini	affected 0.0.0 through 2.2.13
Helmholz / REX100	affected 0.0.0 through 2.2.13

CWE

CWE-798

References

https://cert.vde.com/en/advisories/VDE-2024-056
https://cert.vde.com/en/advisories/VDE-2024-066

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-064.txt