Approved changes feed: RSS · Atom

cpe:2.3:a:helmholz:myrex24:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHelmholz (464ff5a7-c87f-5dc1-9bca-f7c898c0bb50)
ProductMyrex24 (cf8cffd5-cf54-5691-bb85-06416cf155ba)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3092 vulnerable 2026-06-08 07:23:08.102612 MB connect line: Observable response discrepancy in mbCONNECT24/mymbCONNECT24
HIGH (7.5)
An unauthenticated remote attacker can enumerate valid user names from an unprotected endpoint.
Published: 2025-06-24T08:14:31.864Z
Updated: 2025-06-24T13:55:34.477Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3091 vulnerable 2026-06-08 07:23:08.102142 MB connect line: Authorization bypass in mbCONNECT24/mymbCONNECT24
HIGH (7.5)
An low privileged remote attacker in possession of the second factor for another user can login as that user without knowledge of the other user`s password.
Published: 2025-06-24T08:10:29.717Z
Updated: 2025-06-24T13:56:13.121Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3090 vulnerable 2026-06-08 07:23:08.100439 MB connect line: Missing Authentication in mbCONNECT24/mymbCONNECT24
HIGH (8.2)
An unauthenticated remote attacker can obtain limited sensitive information and/or DoS the device due to missing authentication for critical function.
Published: 2025-06-24T08:05:15.547Z
Updated: 2025-06-24T14:18:57.831Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-4834 vulnerable 2026-06-08 06:16:14.689798 Details available
MEDIUM (4.3)
In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implemented access validation allows an authenticated, low privileged attacker to gain read access to limited, non-critical device information in his account he should not have access to.
Published: 2023-10-16T08:40:13.064Z
Updated: 2024-09-16T18:17:07.881Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1779 vulnerable 2026-06-08 05:52:37.025315 Helmholz and MB Connect Line: Account takeover via password reset in multiple products
MEDIUM (4.3)
Exposure of Sensitive Information to an unauthorized actor vulnerability in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual in versions <=2.13.3 allow an authorized remote attacker with low privileges to view a limited amount of another accounts contact information.
Published: 2023-06-06T10:07:35.354Z
Updated: 2025-01-07T19:19:11.622Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-0985 vulnerable 2026-06-08 05:52:33.574872 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-22520 vulnerable 2026-06-08 05:40:54.109082 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34574 vulnerable 2026-06-08 05:32:14.113347 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35570 vulnerable 2026-06-08 05:25:01.340572 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35568 vulnerable 2026-06-08 05:25:01.339409 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35566 vulnerable 2026-06-08 05:25:01.338581 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35561 vulnerable 2026-06-08 05:25:01.336810 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35558 vulnerable 2026-06-08 05:25:01.335060 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35557 vulnerable 2026-06-08 05:25:01.332074 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12527 vulnerable 2026-06-08 05:17:58.608998 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.