What’s Vulnerable › Vulnerabilities

CVE-2024-45274: MB connect line/Helmholz: Remote code execution via confnet service

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-10-15 · updated 2026-06-17
• Weakness: CWE-306

Description

An unauthenticated remote attacker can execute OS commands via UDP on the device due to missing authentication.

Affected products

• Helmholz Rex 100 Firmware: before 2.3.1 — fixed in 2.3.1
• Mbconnectline Mbnet.Mini Firmware: before 2.3.1 — fixed in 2.3.1

How to fix

Upgrade to a fixed version: Helmholz Rex 100 Firmware 2.3.1; Mbconnectline Mbnet.Mini Firmware 2.3.1. Check the vendor advisory for mitigations.

References

• https://cert.vde.com/en/advisories/VDE-2024-056
• https://cert.vde.com/en/advisories/VDE-2024-066
• http://seclists.org/fulldisclosure/2025/Jul/38
• https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-063.txt

Get alerted when CVE-2024-45274 or the next vulnerability affects your stack