CVE-2024-45273
HIGHDescription
An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used.
Is your site exposed to CVE-2024-45273?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| mbconnectline | mbnet.mini_firmware |
| mbconnectline | mbnet.mini |
| helmholz | myrex24_v2_virtual_server |
| helmholz | rex_300_firmware |
| helmholz | rex_300 |
| helmholz | rex_200_firmware |
| helmholz | rex_200 |
| helmholz | rex_250_firmware |
| helmholz | rex_250 |
| helmholz | rex_100_firmware |
| helmholz | rex_100 |
| mbconnectline | mbconnect24 |
| mbconnectline | mymbconnect24 |
| mbconnectline | mbspider_mdh_905_firmware |
| mbconnectline | mbspider_mdh_905 |
| mbconnectline | mbspider_mdh_915_firmware |
| mbconnectline | mbspider_mdh_915 |
| mbconnectline | mbspider_mdh_906_firmware |
| mbconnectline | mbspider_mdh_906 |
| mbconnectline | mbspider_mdh_916_firmware |
| mbconnectline | mbspider_mdh_916 |
| mbconnectline | mbnet_hw1_firmware |
| mbconnectline | mbnet_hw1 |
| mbconnectline | mbnet_firmware |
| mbconnectline | mbnet |
| mbconnectline | mbnet.rokey_firmware |
| mbconnectline | mbnet.rokey |
References
Frequently Asked Questions
What is CVE-2024-45273? +
How severe is CVE-2024-45273? +
What products are affected by CVE-2024-45273? +
How do I check if I'm vulnerable to CVE-2024-45273? +
Related Vulnerabilities
Use of a weak password encoding algorithm in STER software allows the value of the password to be guessed after …
The credentials required to access the device's web server are sent in base64 within the HTTP headers. Since base64 is …
Use of a custom password encoding algorithm in Streamsoft Prestiż software allows straightforward decoding of passwords using their encoded forms, …
The Campbell Scientific CSI Web Server stores web authentication credentials in a file with a specific file name. Passwords within …
A logic issue was addressed with improved checks. This issue is fixed in iOS 18.6 and iPadOS 18.6. Passcode may …
An issue in secdiskapp 1.5.1 (management program for NewQ Fingerprint Encryption Super Speed Flash Disk) allows attackers to gain escalated …