Most recent entries from csaf_helmholzgmbhcokg

VDE-2026-058 — Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual

2026-07-20T13:30:00+00:00

Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual

VDE-2026-070 — Helmholz: Authenticated unintended access to critical program parameters in myREX24V2/myREX24V2.virtual

2026-06-23T12:00:00+00:00

There is a vulnerability in myREX24V2/myREX24V2.virtual that allows an authenticated remote attacker to access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters.

VDE-2026-059 — Helmholz: Multiple vulnerabilities in REX100/REX200/REX250

2026-05-27T11:00:00+00:00

Two command injection vulnerabilities have been discovered in Helmholz REX100/REX200/REX250.

VDE-2026-043 — Helmholz: Multiple Vulnerabilities in myREX24V2/myREX24V2.virtual

2026-05-22T13:00:00+00:00

Multiple vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual that could allow RCE, SQLi or information leakage.

VDE-2026-015 — Helmholz: Use of a Broken or Risky Cryptographic Algorithm

2026-04-21T12:00:00+00:00

Vulnerabilities in WALL IE devices with firmware <= V1.10.210 that allow an attacker to gain control over the device.

VDE-2026-013 — Helmholz: Use of a Broken or Risky Cryptographic Algorithm

2026-04-07T08:00:00+00:00

Vulnerabilities in PROFINET-Switch devices with firmware <= V1.12.010 that allow an attacker to gain control over the device.

VDE-2026-025 — Helmholz: Multiple Vulnerabilities in myREX24V2 / myREX24V2.virtual

2026-03-23T12:00:00+00:00

Multiple vulnerabilities have been discovered in Helmholz myREX24V2 / myREX24V2.virtual that could allow unauthenticated RCE or SQLi.

VDE-2024-069 — Helmholz: Multiple Vulnerabilities in Helmholz products

2026-03-06T08:00:00+00:00

Multiple vulnerabilities have been discovered in Helmholz products that could allow RCE or unauthorized file access.

CVE-2024-45272 affects the myREX24V2 and myREX24V2.virtual products.

CVE-2024-45273 affects the REX 200/REX 250, myREX24V2, myREX24V2.virtual products.

CVE-2024-45275 affects only the REX 200 / REX 250 products.

VDE-2024-066 — Helmholz: Multiple Vulnerabilities in Helmholz REX100 Product

2025-08-27T10:00:00+00:00

Multiple vulnerabilities have been discovered in REX100 allowing for RCE or unauthorized file access.

VDE-2025-069 — Helmholz: Sandbox escape in REX200/250 LUA interpreter

2025-07-31T10:00:00+00:00

An authenticated remote attacker can exploit an undocumented method to escape the LUA sandbox in REX200/250 devices, enabling the execution of arbitrary operating system commands and leading to full system compromise.