CVE-2024-45275: Helmholz Rex 100 Firmware

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

The devices contain two hard coded user accounts with hardcoded passwords that allow an unauthenticated remote attacker for full control of the affected devices.

Affected products

• Helmholz Rex 100 Firmware: before 2.3.1 (fixed in 2.3.1)
• Mbconnectline Mbnet.mini Firmware: before 2.3.1 (fixed in 2.3.1)

Published 2024-10-15. Last modified 2026-06-17.