CVE-2024-45272: high-severity vulnerability in Helmholz myREX24 V2
MB connect line/Helmholz: Generation of weak passwords vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
The remote service portal in MB connect line/Helmholz devices generates weak passwords that are easy to guess, allowing attackers to break in without authorization and disrupt connections.
An unauthenticated remote attacker can exploit weak password generation (CWE-1391) in the remote service portal to conduct efficient brute-force attacks against service credentials. Successful compromise results in unauthorized access and denial of service through connection termination.
In the same product, most dangerous first.