← Vulnerability feed

Vulnerability record · CVE-2024-45273 · published 15 October 2024

CVE-2024-45273: Mbconnectline mbnet.mini firmware inadequate encryption strength vulnerability

Mbconnectline · Mbnet.Mini Firmware

An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used.

7.8 CVSS 3.1 High EPSS 0.09% · top 99.5% CWE-261 · CWE-261CWE-326 · Inadequate encryption strength
7.8CVSS 3.1 base score
0.09%EPSS exploitation probability, 30 days
NoNot in CISA KEV
15Affected product versions listed by NVD
5References
17 Jun 2026Last modified by NVD

Description

An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used.

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

15 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://cert.vde.com/en/advisories/VDE-2024-056 Third Party Advisory
https://cert.vde.com/en/advisories/VDE-2024-066 Third Party Advisory
https://cert.vde.com/en/advisories/VDE-2024-068 Third Party Advisory
https://cert.vde.com/en/advisories/VDE-2024-069 Third Party Advisory
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-062.txt

Track CVE-2024-45273 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2024-45274Mbconnectline mbnet.mini firmware missing authentication for critical function vulnerabilityAn unauthenticated remote attacker can execute OS commands via UDP on the device due to missing authentication.EPSS 1.5%9.8CVE-2024-45275Mbconnectline mbnet.mini firmware hard-coded credentials vulnerabilityThe devices contain two hard coded user accounts with hardcoded passwords that allow an unauthenticated remote attacker for full control of the affec…EPSS 0.80%7.8CVE-2024-45271Mbconnectline mbnet.mini firmware code injection vulnerabilityAn unauthenticated local attacker can gain admin privileges by deploying a config file due to improper input validation.EPSS 0.31%7.5CVE-2024-45276Mbconnectline mbnet.mini firmware missing authentication for critical function vulnerabilityAn unauthenticated remote attacker can get read access to files in the "/tmp" directory due to missing authentication.EPSS 0.63%7.5CVE-2024-45272Helmholz myrex24 v2 virtual server vulnerabilityAn unauthenticated remote attacker can perform a brute-force attack on the credentials of the remote service portal with a high chance of success, re…EPSS 0.62%4.8CVE-2023-34412Helmholz rex 250 firmware cross-site scripting vulnerabilityA vulnerability in Red Lion Europe mbNET/mbNET.rokey and Helmholz REX 200 and REX 250 devices with firmware lower 7.3.2 allows an authenticated remot…EPSS 0.43%

Source: NIST National Vulnerability Database (record CVE-2024-45273), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.