← Database

CVE-2024-45273

HIGH CVSS: 8.4 Published: 2024-10-15 Modified: 2026-06-17

Description

An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used.

Affected Platforms

Mbconnectline Mbspider Mdh 906Mbconnectline Mbspider Mdh 915 FirmwareMbconnectline Mbnet FirmwareHelmholz Rex 100Mbconnectline Mbspider Mdh 916 FirmwareMbconnectline Mbspider Mdh 905Mbconnectline Mbnet.Rokey FirmwareMbconnectline Mbnet Hw1Helmholz Rex 100 FirmwareHelmholz Rex 250 Firmware

Weakness Type

CWE-261, CWE-326

References