Most recent entries from csaf_helmholzgmbhcokg

VDE-2026-070 — Helmholz: Authenticated unintended access to critical program parameters in myREX24V2/myREX24V2.virtual

Tue, 23 Jun 2026 11:00:00 +0000

There is a vulnerability in myREX24V2/myREX24V2.virtual that allows an authenticated remote attacker to access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters.

VDE-2026-059 — Helmholz: Multiple vulnerabilities in REX100/REX200/REX250

Wed, 27 May 2026 11:00:00 +0000

Two command injection vulnerabilities have been discovered in Helmholz REX100/REX200/REX250.

VDE-2026-058 — Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual

Thu, 21 May 2026 11:00:00 +0000

Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual

VDE-2026-015 — Helmholz: Use of a Broken or Risky Cryptographic Algorithm

Tue, 21 Apr 2026 10:00:00 +0000

Vulnerabilities in WALL IE devices with firmware <= V1.10.210 that allow an attacker to gain control over the device.

VDE-2026-043 — Helmholz: Multiple Vulnerabilities in myREX24V2/myREX24V2.virtual

Mon, 13 Apr 2026 11:00:00 +0000

Multiple vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual that could allow RCE, SQLi or information leakage.

VDE-2026-013 — Helmholz: Use of a Broken or Risky Cryptographic Algorithm

Tue, 07 Apr 2026 08:00:00 +0000

Vulnerabilities in PROFINET-Switch devices with firmware <= V1.12.010 that allow an attacker to gain control over the device.

VDE-2026-025 — Helmholz: Multiple Vulnerabilities in myREX24V2 / myREX24V2.virtual

Mon, 23 Mar 2026 12:00:00 +0000

Multiple vulnerabilities have been discovered in Helmholz myREX24V2 / myREX24V2.virtual that could allow unauthenticated RCE or SQLi.

VDE-2025-069 — Helmholz: Sandbox escape in REX200/250 LUA interpreter

Thu, 31 Jul 2025 10:00:00 +0000

An authenticated remote attacker can exploit an undocumented method to escape the LUA sandbox in REX200/250 devices, enabling the execution of arbitrary operating system commands and leading to full system compromise.

VDE-2025-059 — Helmholz: Multiple vulnerabilities in REX 100

Mon, 21 Jul 2025 10:00:00 +0000

Multiple vulnerabilities in all REX 100 devices with firmware <= 2.3.2 that allow an attacker to gain full control over the device.

VDE-2025-038 — Vulnerabilities in myREX24/myREX24.virtual

Tue, 24 Jun 2025 10:00:00 +0000

Two vulnerabilities in myREX24/myREX24.virtual can lead to user enumeration an password bypass.