CVE-2024-45272: Helmholz MYREX24 v2 Virtual Server

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

An unauthenticated remote attacker can perform a brute-force attack on the credentials of the remote service portal with a high chance of success, resulting in connection lost.

Affected products

• Helmholz MYREX24 v2 Virtual Server: before 2.16.3 (fixed in 2.16.3)
• Helmholz Rex 200 Firmware: before 8.2.1 (fixed in 8.2.1)
• Helmholz Rex 250 Firmware: before 8.2.1 (fixed in 8.2.1)
• Helmholz Rex 300 Firmware: up to and including 5.1.11
• Mbconnectline MBCONNECT24: before 2.16.3 (fixed in 2.16.3)
• Mbconnectline Mbnet.rokey Firmware: before 8.2.1 (fixed in 8.2.1)
• Mbconnectline Mbnet Firmware: before 8.2.1 (fixed in 8.2.1)
• Mbconnectline Mbnet HW1 Firmware: up to and including 5.1.11
• Mbconnectline Mbspider Mdh 905 Firmware: up to and including 2.6.5
• Mbconnectline Mbspider Mdh 906 Firmware: up to and including 2.6.5
• Mbconnectline Mbspider Mdh 915 Firmware: up to and including 2.6.5
• Mbconnectline Mbspider Mdh 916 Firmware: up to and including 2.6.5
• Mbconnectline MYMBCONNECT24: before 2.16.3 (fixed in 2.16.3)

Published 2024-10-15. Last modified 2026-06-17.