What’s Vulnerable › Vulnerabilities

CVE-2023-34412: Stored XXS vulnerability in mbnet, mbnet.rokey, REX 200 and REX 250

• Severity: medium (CVSS 4.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-08-17 · updated 2026-06-17
• Weakness: CWE-79

Description

A vulnerability in Red Lion Europe mbNET/mbNET.rokey and Helmholz REX 200 and REX 250 devices with firmware lower 7.3.2 allows an authenticated remote attacker with high privileges to inject malicious HTML or JavaScript code (XSS).

Affected products

• Helmholz Rex 200 Firmware: before 7.3.2 — fixed in 7.3.2
• Helmholz Rex 250 Firmware: before 7.3.2 — fixed in 7.3.2
• Redlion Mbnet.Rokey Rkh 210 Firmware: before 7.3.2 — fixed in 7.3.2
• Redlion Mbnet.Rokey Rkh 216 Firmware: before 7.3.2 — fixed in 7.3.2
• Redlion Mbnet.Rokey Rkh 235 Firmware: before 7.3.2 — fixed in 7.3.2
• Redlion Mbnet.Rokey Rkh 259 Firmware: before 7.3.2 — fixed in 7.3.2
• Redlion Mbnet Mdh 811 Firmware: before 7.3.2 — fixed in 7.3.2
• Redlion Mbnet Mdh 816 Firmware: before 7.3.2 — fixed in 7.3.2
• Redlion Mbnet Mdh 831 Firmware: before 7.3.2 — fixed in 7.3.2
• Redlion Mbnet Mdh 835 Firmware: before 7.3.2 — fixed in 7.3.2
• Redlion Mbnet Mdh 841 Firmware: before 7.3.2 — fixed in 7.3.2
• Redlion Mbnet Mdh 850 Firmware: before 7.3.2 — fixed in 7.3.2
• Redlion Mbnet Mdh 855 Firmware: before 7.3.2 — fixed in 7.3.2
• Redlion Mbnet Mdh 858 Firmware: before 7.3.2 — fixed in 7.3.2
• Redlion Mbnet Mdh 859 Firmware: before 7.3.2 — fixed in 7.3.2
• Redlion Mbnet Mdh 871 Firmware: before 7.3.2 — fixed in 7.3.2
• Redlion Mbnet Mdh 876 Firmware: before 7.3.2 — fixed in 7.3.2

How to fix

Upgrade to a fixed version: Helmholz Rex 200 Firmware 7.3.2; Helmholz Rex 250 Firmware 7.3.2; Redlion Mbnet.Rokey Rkh 210 Firmware 7.3.2; Redlion Mbnet.Rokey Rkh 216 Firmware 7.3.2; Redlion Mbnet.Rokey Rkh 235 Firmware 7.3.2; Redlion Mbnet.Rokey Rkh 259 Firmware 7.3.2; Redlion Mbnet Mdh 811 Firmware 7.3.2; Redlion Mbnet Mdh 816 Firmware 7.3.2; Redlion Mbnet Mdh 831 Firmware 7.3.2; Redlion Mbnet Mdh 835 Firmware 7.3.2; Redlion Mbnet Mdh 841 Firmware 7.3.2; Redlion Mbnet Mdh 850 Firmware 7.3.2. Check the vendor advisory for mitigations.

References

• https://cert.vde.com/en/advisories/VDE-2023-012/
• https://cert.vde.com/en/advisories/VDE-2023-029/
• https://cert.vde.com/en/advisories/VDE-2023-012/
• https://cert.vde.com/en/advisories/VDE-2023-029/

Get alerted when CVE-2023-34412 or the next vulnerability affects your stack