CVE-2023-34412
17.08.2023, 14:15
A vulnerability in Red Lion Europe mbNET/mbNET.rokey and Helmholz REX 200 and REX 250 devices with firmware lower 7.3.2 allows an authenticated remote attacker with high privileges to inject malicious HTML or JavaScript code (XSS).
| Vendor | Product | Version |
|---|---|---|
| helmholz | rex_250_firmware | 𝑥 < 7.3.2 |
| helmholz | rex_200_firmware | 𝑥 < 7.3.2 |
| redlion | mbnet.rokey_rkh_210_firmware | 𝑥 < 7.3.2 |
| redlion | mbnet.rokey_rkh_216_firmware | 𝑥 < 7.3.2 |
| redlion | mbnet.rokey_rkh_235_firmware | 𝑥 < 7.3.2 |
| redlion | mbnet.rokey_rkh_259_firmware | 𝑥 < 7.3.2 |
| redlion | mbnet_mdh_811_firmware | 𝑥 < 7.3.2 |
| redlion | mbnet_mdh_850_firmware | 𝑥 < 7.3.2 |
| redlion | mbnet_mdh_871_firmware | 𝑥 < 7.3.2 |
| redlion | mbnet_mdh_831_firmware | 𝑥 < 7.3.2 |
| redlion | mbnet_mdh_855_firmware | 𝑥 < 7.3.2 |
| redlion | mbnet_mdh_876_firmware | 𝑥 < 7.3.2 |
| redlion | mbnet_mdh_858_firmware | 𝑥 < 7.3.2 |
| redlion | mbnet_mdh_816_firmware | 𝑥 < 7.3.2 |
| redlion | mbnet_mdh_841_firmware | 𝑥 < 7.3.2 |
| redlion | mbnet_mdh_859_firmware | 𝑥 < 7.3.2 |
| redlion | mbnet_mdh_835_firmware | 𝑥 < 7.3.2 |
𝑥
= Vulnerable software versions