CVE-2024-45272

An unauthenticated remote attacker can perform a brute-force attack on the credentials of the remote service portal with a high chance of success, resulting in connection lost.

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://cert.vde.com/en/advisories/VDE-2024-068	Third Party Advisory
https://cert.vde.com/en/advisories/VDE-2024-069	Third Party Advisory
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-061.txt

Configurations

Configuration 1 (hide)

cpe:2.3:a:helmholz:myrex24_v2_virtual_server:*:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:helmholz:rex_300_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:helmholz:rex_300:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:o:helmholz:rex_200_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:helmholz:rex_200:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

cpe:2.3:o:helmholz:rex_250_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:helmholz:rex_250:-:*:*:*:*:*:*:*

Configuration 5 (hide)

OR	cpe:2.3:a:mbconnectline:mbconnect24::::::::
	cpe:2.3:a:mbconnectline:mymbconnect24::::::::

Configuration 6 (hide)

AND

cpe:2.3:o:mbconnectline:mbspider_mdh_905_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mbconnectline:mbspider_mdh_905:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND

cpe:2.3:o:mbconnectline:mbspider_mdh_915_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mbconnectline:mbspider_mdh_915:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND

cpe:2.3:o:mbconnectline:mbspider_mdh_906_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mbconnectline:mbspider_mdh_906:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND

cpe:2.3:o:mbconnectline:mbspider_mdh_916_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mbconnectline:mbspider_mdh_916:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND

cpe:2.3:o:mbconnectline:mbnet_hw1_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mbconnectline:mbnet_hw1:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND

cpe:2.3:o:mbconnectline:mbnet_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mbconnectline:mbnet:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND

cpe:2.3:o:mbconnectline:mbnet.rokey_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:mbconnectline:mbnet.rokey:-:*:*:*:*:*:*:*

History

21 Nov 2024, 09:37

Type	Values Removed	Values Added
References		() https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-061.txt -

17 Oct 2024, 17:42

Type	Values Removed	Values Added
CPE		cpe:2.3:o:mbconnectline:mbspider_mdh_916_firmware:::::::: cpe:2.3:a:mbconnectline:mbconnect24:::::::: cpe:2.3:o:mbconnectline:mbnet.rokey_firmware:::::::: cpe:2.3:o:mbconnectline:mbspider_mdh_915_firmware:::::::: cpe:2.3:a:helmholz:myrex24_v2_virtual_server:::::::: cpe:2.3:o:mbconnectline:mbnet_hw1_firmware:::::::: cpe:2.3:o:mbconnectline:mbspider_mdh_906_firmware:::::::: cpe:2.3:h:mbconnectline:mbnet:-:::::::* cpe:2.3:h:mbconnectline:mbspider_mdh_915:-:::::::* cpe:2.3:o:helmholz:rex_250_firmware:::::::: cpe:2.3:h:mbconnectline:mbspider_mdh_905:-:::::::* cpe:2.3:h:mbconnectline:mbnet.rokey:-:::::::* cpe:2.3:o:helmholz:rex_200_firmware:::::::: cpe:2.3:o:helmholz:rex_300_firmware:::::::: cpe:2.3:h:helmholz:rex_250:-:::::::* cpe:2.3:h:helmholz:rex_200:-:::::::* cpe:2.3:h:mbconnectline:mbspider_mdh_906:-:::::::* cpe:2.3:o:mbconnectline:mbspider_mdh_905_firmware:::::::: cpe:2.3:h:mbconnectline:mbnet_hw1:-:::::::* cpe:2.3:h:mbconnectline:mbspider_mdh_916:-:::::::* cpe:2.3:a:mbconnectline:mymbconnect24:::::::: cpe:2.3:h:helmholz:rex_300:-:::::::* cpe:2.3:o:mbconnectline:mbnet_firmware::::::::
CWE		NVD-CWE-Other
References	~~() https://cert.vde.com/en/advisories/VDE-2024-068 -~~	() https://cert.vde.com/en/advisories/VDE-2024-068 - Third Party Advisory
References	~~() https://cert.vde.com/en/advisories/VDE-2024-069 -~~	() https://cert.vde.com/en/advisories/VDE-2024-069 - Third Party Advisory
Summary		(es) Un atacante remoto no autenticado puede realizar un ataque de fuerza bruta a las credenciales del portal de servicio remoto con una alta probabilidad de éxito, lo que da como resultado la pérdida de la conexión.
First Time		Mbconnectline mbspider Mdh 905 Firmware Mbconnectline mbspider Mdh 905 Mbconnectline mbnet Hw1 Mbconnectline mbspider Mdh 915 Mbconnectline mbspider Mdh 906 Helmholz rex 200 Firmware Helmholz rex 250 Mbconnectline mbnet.rokey Firmware Mbconnectline mbnet Helmholz myrex24 V2 Virtual Server Helmholz rex 300 Firmware Mbconnectline mbspider Mdh 916 Firmware Mbconnectline Mbconnectline mbnet.rokey Helmholz Mbconnectline mbnet Firmware Mbconnectline mbspider Mdh 915 Firmware Mbconnectline mymbconnect24 Mbconnectline mbconnect24 Helmholz rex 250 Firmware Mbconnectline mbspider Mdh 906 Firmware Mbconnectline mbnet Hw1 Firmware Helmholz rex 300 Mbconnectline mbspider Mdh 916 Helmholz rex 200

15 Oct 2024, 11:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-10-15 11:15

Updated : 2024-11-21 09:37

NVD link : CVE-2024-45272

Mitre link : CVE-2024-45272

CVE.ORG link : CVE-2024-45272

JSON object : View

Products Affected

mbconnectline

mbconnect24
mbspider_mdh_905
mbnet.rokey
mbspider_mdh_905_firmware
mbspider_mdh_906_firmware
mbnet_firmware
mbnet
mbnet.rokey_firmware
mbnet_hw1_firmware
mbspider_mdh_915
mbnet_hw1
mbspider_mdh_906
mbspider_mdh_915_firmware
mbspider_mdh_916
mymbconnect24
mbspider_mdh_916_firmware

helmholz

rex_300_firmware
rex_300
rex_200
myrex24_v2_virtual_server
rex_250
rex_250_firmware
rex_200_firmware

CWE

CWE-1391

Use of Weak Credentials

NVD-CWE-Other

{"id": "CVE-2024-45272", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "info@cert.vde.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2024-10-15T11:15:11.673", "references": [{"url": "https://cert.vde.com/en/advisories/VDE-2024-068", "tags": ["Third Party Advisory"], "source": "info@cert.vde.com"}, {"url": "https://cert.vde.com/en/advisories/VDE-2024-069", "tags": ["Third Party Advisory"], "source": "info@cert.vde.com"}, {"url": "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-061.txt", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "info@cert.vde.com", "description": [{"lang": "en", "value": "CWE-1391"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "An unauthenticated remote attacker can perform a brute-force attack on the credentials of the remote service portal with a high chance of success, resulting in connection lost."}, {"lang": "es", "value": "Un atacante remoto no autenticado puede realizar un ataque de fuerza bruta a las credenciales del portal de servicio remoto con una alta probabilidad de \u00e9xito, lo que da como resultado la p\u00e9rdida de la conexi\u00f3n."}], "lastModified": "2024-11-21T09:37:35.310", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:helmholz:myrex24_v2_virtual_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5D5B73E2-38BA-415D-96AF-D0F835E3C9BC", "versionEndExcluding": "2.16.3"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:helmholz:rex_300_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "05CB17C2-1B86-41AA-8737-718BA9464BB0", "versionEndIncluding": "5.1.11"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:helmholz:rex_300:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "DB65F958-3FF4-48A7-8007-406A7FDBA0E7"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:helmholz:rex_200_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EE10F9E9-A0EE-4CF1-9F4B-6AF4179ED03E", "versionEndExcluding": "8.2.1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:helmholz:rex_200:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "28B3785D-8EFF-4A67-88F1-8F9D0EC39D6C"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:helmholz:rex_250_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "67ECB608-F99D-479C-95CC-349DCB530D98", "versionEndExcluding": "8.2.1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:helmholz:rex_250:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "53454815-3E7A-4097-8FC7-2F7634DAF7E1"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mbconnectline:mbconnect24:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9F017673-3A54-4D92-811F-AE395CCED7CF", "versionEndExcluding": "2.16.3"}, {"criteria": "cpe:2.3:a:mbconnectline:mymbconnect24:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "18BC8E52-E277-4D72-903A-A31FC658B6E2", "versionEndExcluding": "2.16.3"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:mbconnectline:mbspider_mdh_905_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "188A4550-AE25-459E-9624-97090842230B", "versionEndIncluding": "2.6.5"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mbconnectline:mbspider_mdh_905:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5ABBF6FE-BF26-43B2-B54C-6ECE4234B3C9"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:mbconnectline:mbspider_mdh_915_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3CAEA6C5-27F5-4BA5-BEB4-DD2EDE66F877", "versionEndIncluding": "2.6.5"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mbconnectline:mbspider_mdh_915:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "ED665544-6D67-465A-8850-6FD7A44D9E6F"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:mbconnectline:mbspider_mdh_906_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E41557B9-9BE2-4286-A1FE-88CDAD14B824", "versionEndIncluding": "2.6.5"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mbconnectline:mbspider_mdh_906:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "63B499C3-0C59-488D-89E7-2CBEEA42E1E9"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:mbconnectline:mbspider_mdh_916_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "75321482-BFC4-4D37-AF03-9212AE6028A7", "versionEndIncluding": "2.6.5"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mbconnectline:mbspider_mdh_916:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "B74973FF-4DC9-4076-A161-28EC0A5F5E6D"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:mbconnectline:mbnet_hw1_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7470E3A2-72C5-4743-ABC2-14FB4C9F02D8", "versionEndIncluding": "5.1.11"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mbconnectline:mbnet_hw1:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "83E49632-8868-4BF8-A86D-E7F10130B378"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:mbconnectline:mbnet_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "40166B67-481E-4B36-BBD8-4F5721B75B9E", "versionEndExcluding": "8.2.1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mbconnectline:mbnet:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4D8CB051-1E1A-4014-9FB2-4473AC4CEE30"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:mbconnectline:mbnet.rokey_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2AE59454-A9F9-44BE-8B06-9A631332A4E9", "versionEndExcluding": "8.2.1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:mbconnectline:mbnet.rokey:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "CC7B6E4C-1AC2-4CD8-A056-2EF8845622CA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "info@cert.vde.com"}

7.5 /10