CVE-2024-45271 - MB connect line/Helmholz: Remote code execution due to improper input validation

HIGH

MB connect line/Helmholz: Remote code execution due to improper input validation

Published Oct 15, 2024

8.4

HIGH

CVSS 3.1

EPSS 0.31%

An unauthenticated local attacker can gain admin privileges by deploying a config file due to improper input validation.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
0.0.0	affected	<=2.2.13

unaffected

Version	Status	Constraints
0.0.0	affected	<=2.2.13

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
0	affected	<=2.2.13

n/a

Version	Status	Constraints
0	affected	<=2.2.13

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

Link	Providers	Tags
https://cert.vde.com/en/advisories/VDE-2024-056		Third Party Advisory
https://cert.vde.com/en/advisories/VDE-2024-066		Third Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-41404		Advisory
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-059.txt