There is a vulnerability in myREX24V2/myREX24V2.virtual that allows an authenticated remote attacker to access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters.

Two command injection vulnerabilities have been discovered in Helmholz REX100/REX200/REX250.

Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual

Vulnerabilities in WALL IE devices with firmware <= V1.10.210 that allow an attacker to gain control over the device.

Multiple vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual that could allow RCE, SQLi or information leakage.

Vulnerabilities in PROFINET-Switch devices with firmware <= V1.12.010 that allow an attacker to gain control over the device.

Multiple vulnerabilities have been discovered in Helmholz myREX24V2 / myREX24V2.virtual that could allow unauthenticated RCE or SQLi.

An authenticated remote attacker can exploit an undocumented method to escape the LUA sandbox in REX200/250 devices, enabling the execution of arbitrary operating system commands and leading to full system compromise.

Multiple vulnerabilities in all REX 100 devices with firmware <= 2.3.2 that allow an attacker to gain full control over the device.

Two vulnerabilities in myREX24/myREX24.virtual can lead to user enumeration an password bypass.