Most recent entries from csaf_helmholzgmbhcokg

VDE-2026-058 — Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual

Thu, 21 May 2026 11:00:00 +0000

Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual

VDE-2026-070 — Helmholz: Authenticated unintended access to critical program parameters in myREX24V2/myREX24V2.virtual

Tue, 23 Jun 2026 11:00:00 +0000

There is a vulnerability in myREX24V2/myREX24V2.virtual that allows an authenticated remote attacker to access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters.

VDE-2026-059 — Helmholz: Multiple vulnerabilities in REX100/REX200/REX250

Wed, 27 May 2026 11:00:00 +0000

Two command injection vulnerabilities have been discovered in Helmholz REX100/REX200/REX250.

VDE-2026-043 — Helmholz: Multiple Vulnerabilities in myREX24V2/myREX24V2.virtual

Mon, 13 Apr 2026 11:00:00 +0000

Multiple vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual that could allow RCE, SQLi or information leakage.

VDE-2026-015 — Helmholz: Use of a Broken or Risky Cryptographic Algorithm

Tue, 21 Apr 2026 10:00:00 +0000

Vulnerabilities in WALL IE devices with firmware <= V1.10.210 that allow an attacker to gain control over the device.

VDE-2026-013 — Helmholz: Use of a Broken or Risky Cryptographic Algorithm

Tue, 07 Apr 2026 08:00:00 +0000

Vulnerabilities in PROFINET-Switch devices with firmware <= V1.12.010 that allow an attacker to gain control over the device.

VDE-2026-025 — Helmholz: Multiple Vulnerabilities in myREX24V2 / myREX24V2.virtual

Mon, 23 Mar 2026 12:00:00 +0000

Multiple vulnerabilities have been discovered in Helmholz myREX24V2 / myREX24V2.virtual that could allow unauthenticated RCE or SQLi.

VDE-2024-069 — Helmholz: Multiple Vulnerabilities in Helmholz products

Tue, 15 Oct 2024 08:00:00 +0000

Multiple vulnerabilities have been discovered in Helmholz products that could allow RCE or unauthorized file access.

CVE-2024-45272 affects the myREX24V2 and myREX24V2.virtual products.

CVE-2024-45273 affects the REX 200/REX 250, myREX24V2, myREX24V2.virtual products.

CVE-2024-45275 affects only the REX 200 / REX 250 products.

VDE-2024-066 — Helmholz: Multiple Vulnerabilities in Helmholz REX100 Product

Tue, 15 Oct 2024 08:00:00 +0000

Multiple vulnerabilities have been discovered in REX100 allowing for RCE or unauthorized file access.

VDE-2025-069 — Helmholz: Sandbox escape in REX200/250 LUA interpreter

Thu, 31 Jul 2025 10:00:00 +0000

An authenticated remote attacker can exploit an undocumented method to escape the LUA sandbox in REX200/250 devices, enabling the execution of arbitrary operating system commands and leading to full system compromise.