CVE-2023-4834: Medium severity helmholz myrex24 vulnerability
In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implemented access validation allows an authenticated, low privileged attacker to gain read access to limited, non-critical device information in his account he should not have access to.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
CVE-2023-4834
What is the severity of CVE-2023-4834?
Medium (4.3)
Which software versions are affected by CVE-2023-4834?
Helmholz myREX24 up to and including 2.14.2, Helmholz Myrex24.virtual up to and including 2.14.2, Mbconnectline Mbconnect24 up to and including 2.14.2, Mbconnectline Mymbconnect24 up to and including 2.14.2
What is the vulnerability description of CVE-2023-4834?
An improperly implemented access validation in Red Lion Europe mbCONNECT24, mymbCONNECT24, Helmholz myREX24, and myREX24.virtual allows an authenticated, low privileged attacker to gain read access to limited, non-critical device information in their account.
How can I fix CVE-2023-4834?
Upgrade to a version higher than 2.14.2 for Helmholz myREX24, Helmholz Myrex24.virtual, Mbconnectline Mbconnect24, and Mbconnectline Mymbconnect24.