CVE-2024-45276

An unauthenticated remote attacker can get read access to files in the "/tmp" directory due to missing authentication.

Score

CVSS 3.1 7.5 High

Status

Modified - info@cert.vde.com

Published

2024-10-15

Last modified

2025-01-24

Weaknesses

CWE-306

Affected products

• Rex100 (Helmholz)
• Rex 100 Firmware (Helmholz)
• Mbnet.mini (Mb Connect Line)
• Mbnet.mini Firmware (Mbconnectline)

References

• https://cert.vde.com/en/advisories/VDE-2024-056
• https://cert.vde.com/en/advisories/VDE-2024-066
• https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-065.txt