What’s Vulnerable › Vulnerabilities

CVE-2024-45276: MB connect line/Helmholz: tmp directory exposed via webservice

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-10-15 · updated 2026-06-17
• Weakness: CWE-306

Description

An unauthenticated remote attacker can get read access to files in the "/tmp" directory due to missing authentication.

Affected products

• Helmholz Rex 100 Firmware: before 2.3.1 — fixed in 2.3.1
• Mbconnectline Mbnet.Mini Firmware: before 2.3.1 — fixed in 2.3.1

How to fix

Upgrade to a fixed version: Helmholz Rex 100 Firmware 2.3.1; Mbconnectline Mbnet.Mini Firmware 2.3.1. Check the vendor advisory for mitigations.

References

• https://cert.vde.com/en/advisories/VDE-2024-056
• https://cert.vde.com/en/advisories/VDE-2024-066
• https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-065.txt

Get alerted when CVE-2024-45276 or the next vulnerability affects your stack