ICS Advisories

Risk evaluation

Helmholz: Multiple SQLi vulnerabilities in myREX24V2/myREX24V2.virtual

Mitigation summary

Update the myREX24V2/myREX24V2.virtual instance to version 2.20.1.

Risk evaluation

There is a vulnerability in myREX24V2/myREX24V2.virtual that allows an authenticated remote attacker to access a hidden configuration method, that should not be accessible by any user, to modify critical program parameters.

Mitigation summary

Update the myREX24V2/myREX24V2.virtual instance to version 2.20.2.

Risk evaluation

Two command injection vulnerabilities have been discovered in Helmholz REX100/REX200/REX250.

Mitigation summary

Update: - REX200/250: 8.4.5 - REX100: 3.0.3

Risk evaluation

Multiple vulnerabilities have been discovered in Helmholz myREX24V2/myREX24V2.virtual that could allow RCE, SQLi or information leakage.

Mitigation summary

Update the myREX24V2/myREX24V2.virtual instance to version 2.19.5.

Risk evaluation

Vulnerabilities in WALL IE devices with firmware <= V1.10.210 that allow an attacker to gain control over the device.

Mitigation summary

Update to latest firmware 1.10.232

Risk evaluation

Vulnerabilities in PROFINET-Switch devices with firmware <= V1.12.010 that allow an attacker to gain control over the device.

Mitigation summary

Update to latest firmware 1.12.100

Risk evaluation

Multiple vulnerabilities have been discovered in Helmholz myREX24V2 / myREX24V2.virtual that could allow unauthenticated RCE or SQLi.

Mitigation summary

Update the myREX24V2 / myREX24V2.virtual instance to version 2.19.4.

Risk evaluation

Multiple vulnerabilities have been discovered in Helmholz products that could allow RCE or unauthorized file access. CVE-2024-45272 affects the myREX24V2 and myREX24V2.virtual products. CVE-2024-45273 affects the REX 200/REX 250, myREX24V2, myREX24V2.virtual products. CVE-2024-45275 affects only the REX 200 / REX 250 products.

Mitigation summary

**Note**: REX 300 is EOL and will not receive any further updates.

Risk evaluation

Multiple vulnerabilities have been discovered in REX100 allowing for RCE or unauthorized file access.

Mitigation summary

Update REX100 to the version 2.3.1

Risk evaluation

An authenticated remote attacker can exploit an undocumented method to escape the LUA sandbox in REX200/250 devices, enabling the execution of arbitrary operating system commands and leading to full system compromise.

Mitigation summary

Update REX 200/250 to at least version 7.3.0\ **Note**: REX 300 is EOL and will not receive any further updates.

Risk evaluation

Multiple vulnerabilities in all REX 100 devices with firmware <= 2.3.2 that allow an attacker to gain full control over the device.

Mitigation summary

As this is an authenticated exploit, you can mitigate it by making sure that no malicious actor can login to a vulnerable device.

Risk evaluation

The mb24api endpoint reachable when connected via VPN is missing authentication for sensitive functions. This can lead to information disclosure of user- and device names and to DoS.

Mitigation summary

Update to latest version: 2.18.0

Risk evaluation

Two vulnerabilities in myREX24/myREX24.virtual can lead to user enumeration an password bypass.

Mitigation summary

Update to latest version: 2.16.5

Risk evaluation

Multiple Vulnerabilities in a software service of shDIALUP can lead to arbitrary code execution due to improper privilege management. Update A, 2022-03-28 Updated CVSS score from CVE-2021-33527 from 7.8 to 9.8 due to new information about the vulnerability

Mitigation summary

Update shDialup to 3.9R0.5

Risk evaluation

An issue was discovered in myREX24 and myREX24.virtual in all versions through 2.11.2.

Mitigation summary

Update to Version 2.12.1

Risk evaluation

An issue was discovered in the myREX24 and myREX24-virtual software in all versions through V2.9.0.

Mitigation summary

Update myREX24/myREX24-virtual to 2.10.1

Risk evaluation

The data24 service that is bundled with every installation of myREX24 V2/myREX24.virtual has two serious flaws in core components. These combined can lead to a complete loss of confidentiality, integrity and availability.

Mitigation summary

Update to latest version: 2.16.2 CVE-2024-23943: This fix does not apply to REX 200/REX 250 devices with firmware 8.0.0 - 8.1.3. If you are using a device with this firmware, please update it to >= 8.2.0.

Risk evaluation

Several Helmholz products are vulnerable to a possible race condition vulnerability in OpenSSH named "regreSSHion".

Mitigation summary

Prevent all access to the sshd daemon listening on port 22.

Risk evaluation

There exists a vulnerability in all REX 100 devices with firmware <= 2.2.11 that allows an authenticated attacker to execute arbitrary system commands via GET requests. Update: 03.07.2024 3:30pm  In section Reported by Sebastian Dietz (CyberDanube) was added.

Mitigation summary

As this is an authenticated exploit, you can mitigate it by making sure that no malicious actor can login to a vulnerable device.

Risk evaluation

A vulnerability in the affected products allows an authenticated, low-privileged attacker to gain unauthorized read access to limited, non-critical device information. The issue arises from improper access validation.

Mitigation summary

Update to latest Version 2.14.3