CVE-2025-3090

An unauthenticated remote attacker can obtain limited sensitive information and/or DoS the device due to missing authentication for critical function.

Score

CVSS 3.1 8.2 High

Status

Deferred - info@cert.vde.com

Published

2025-06-24

Last modified

2025-06-24

Weaknesses

CWE-306

Affected products

• Myrex24 (Helmholz)
• Myrex24.virtual (Helmholz)
• Mbconnect24 (Mb Connect Line)
• Mymbconnect24 (Mb Connect Line)

References

• https://certvde.com/en/advisories/VDE-2025-034
• https://certvde.com/en/advisories/VDE-2025-037