CVE-2023-34412
MediumCVSS 4.8Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
A vulnerability in Red Lion Europe mbNET/mbNET.rokey and Helmholz REX 200 and REX 250 devices with firmware lower than 7.3.2 allows an authenticated remote attacker with high privileges to inject malicious HTML or JavaScript code (XSS).
Risk Assessment
An attacker could exploit this vulnerability to gain control over the device or steal user data, posing a serious security threat to the organization.
Recommendation
It is recommended to update the firmware to version 7.3.2 or newer to mitigate this vulnerability.
Original NVD description (English source)
A vulnerability in Red Lion Europe mbNET/mbNET.rokey and Helmholz REX 200 and REX 250 devices with firmware lower 7.3.2 allows an authenticated remote attacker with high privileges to inject malicious HTML or JavaScript code (XSS).