What is CVE-2023-34412?

CVE-2023-34412 is a medium-severity vulnerability in Helmholz Rex 200, classified under Cross-site Scripting. CVSS score: 4.8/10. Published 2023-08-17.

How severe is CVE-2023-34412?

Medium severity. CVSS v3 base score is 4.8 out of 10.

XSS in Helmholz Rex 200

CVE-2023-34412

A vulnerability in Red Lion Europe mbNET/mbNET.rokey and Helmholz REX 200 and REX 250 devices with firmware lower 7.3.2 allows an authenticated remote attacker with high privileges to inject malicious HTML or JavaScript code (XSS).

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.003 (26.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.8 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N.

Affected products

Helmholz Rex 200 — versions 0
Helmholz Rex_200
Helmholz Rex_200_firmware
Helmholz Rex 250 — versions 0
Helmholz Rex_250
Helmholz Rex_250_firmware
Redlion Mbnet_mdh_811
Redlion Mbnet_mdh_811_firmware
Redlion Mbnet_mdh_816
Redlion Mbnet_mdh_816_firmware

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

info@cert.vde.com (Third Party Advisory)
info@cert.vde.com (Third Party Advisory)

Frequently asked questions

What is CVE-2023-34412?: CVE-2023-34412 is a medium-severity vulnerability in Helmholz Rex 200, classified under Cross-site Scripting. CVSS score: 4.8/10. Published 2023-08-17.
How severe is CVE-2023-34412?: Medium severity. CVSS v3 base score is 4.8 out of 10.