Description
An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
MB connect line mbNET.mini
Default version status: unaffected
0.0.0 to ≤ 2.2.13affected
MB connect line mbNET/mbNET.rokey
Default version status: unaffected
0.0.0 to ≤ 8.2.0affected
MB connect line mbNET HW1
Default version status: unaffected
0.0.0 to ≤ 5.1.11affected
MB connect line mbSPIDER
Default version status: unaffected
0.0.0 to ≤ 2.6.5affected
MB connect line mbCONNECT24
Default version status: unaffected
0.0.0 to ≤ 2.16.2affected
MB connect line mymbCONNECT24
Default version status: unaffected
0.0.0 to ≤ 2.16.2affected
Helmholz REX100
Default version status: unaffected
0.0.0 to ≤ <= 2.2.13affected
Helmholz REX200/250
Default version status: unaffected
0.0.0 to ≤ <= 8.2.0affected
Helmholz myREX24 V2
Default version status: unaffected
0.0.0 to ≤ <= 2.16.2affected
Helmholz myREX24.virtual
Default version status: unaffected
0.0.0 to ≤ <= 2.16.2affected
Helmholz REX300
Default version status: unaffected
0.0.0 to ≤ <= 5.1.11affected