CVE-2024-45275

Two user accounts with fixed, unchangeable passwords are embedded in the device firmware (CWE-798 — Use of Hard-coded Credentials). Since the authentication credentials are identical across all instances of a given model and cannot be changed by the administrator, an attacker who knows these passwords can log in to any vulnerable device without any additional authorization. The attack is possible remotely over the network, without requiring prior access or user interaction.

Attackers gain full control over the device, including the ability to read and modify configuration, disrupt device operation, and potentially use it as an entry point to a broader industrial network.

Apply patches available from the manufacturer according to references (CERT VDE: VDE-2024-056 and VDE-2024-066). Additionally, it is recommended to isolate devices from the public Internet, restrict network access to these devices to trusted hosts only, and monitor login attempts.

Mbconnectline Mbnet.Mini (Firmware), Helmholz Rex 100 (Firmware) — specific versions indicated in manufacturer references