CVE-2024-45272
HIGHDescription
An unauthenticated remote attacker can perform a brute-force attack on the credentials of the remote service portal with a high chance of success, resulting in connection lost.
Is your site exposed to CVE-2024-45272?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| helmholz | myrex24_v2_virtual_server |
| helmholz | rex_300_firmware |
| helmholz | rex_300 |
| helmholz | rex_200_firmware |
| helmholz | rex_200 |
| helmholz | rex_250_firmware |
| helmholz | rex_250 |
| mbconnectline | mbconnect24 |
| mbconnectline | mymbconnect24 |
| mbconnectline | mbspider_mdh_905_firmware |
| mbconnectline | mbspider_mdh_905 |
| mbconnectline | mbspider_mdh_915_firmware |
| mbconnectline | mbspider_mdh_915 |
| mbconnectline | mbspider_mdh_906_firmware |
| mbconnectline | mbspider_mdh_906 |
| mbconnectline | mbspider_mdh_916_firmware |
| mbconnectline | mbspider_mdh_916 |
| mbconnectline | mbnet_hw1_firmware |
| mbconnectline | mbnet_hw1 |
| mbconnectline | mbnet_firmware |
| mbconnectline | mbnet |
| mbconnectline | mbnet.rokey_firmware |
| mbconnectline | mbnet.rokey |
References
Frequently Asked Questions
What is CVE-2024-45272? +
How severe is CVE-2024-45272? +
What products are affected by CVE-2024-45272? +
How do I check if I'm vulnerable to CVE-2024-45272? +
Related Vulnerabilities
Dlink DWR-X1820 router uses weak default password generated from its IMEI number and does not require users to change it. …
joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards. Prior to …
A vulnerability exists in the netclient and factory services of Reolink Home Hub (versions prior to v3.3.0.456_26031911) due to the …
Weak credentials in the CashDro 3 web administration panel, version 24.01.00.26, where the platform allows the use of numeric PINs …
ProjectsAndPrograms school-management-system uses predictable credentials by generating student's and teacher's passwords solely from the user’s date of birth (e.g., 12072000 …
In Slican telephone exchanges secure key is generated in a predictable manner using properties of the telephone exchange which can …