CVSS 3.1
4.8 mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:NCVE-2023-34412
A vulnerability in Red Lion Europe mbNET/mbNET.rokey and Helmholz REX 200 and REX 250 devices with firmware lower 7.3.2 allows an
authenticated remote attacker with high privileges to inject malicious HTML or JavaScript code (XSS).
Severity
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 37% of CVEs (scores of 2026-10-31)
- CWE
- CWE-79
- Published
- Modified
- Record from
- the NVD, synced
Affected
- helmholz:rex_200_firmware
- helmholz:rex_250_firmware
- redlion:mbnet.rokey_rkh_210_firmware
- redlion:mbnet.rokey_rkh_216_firmware
- redlion:mbnet.rokey_rkh_235_firmware
- redlion:mbnet.rokey_rkh_259_firmware
- redlion:mbnet_mdh_811_firmware
- redlion:mbnet_mdh_816_firmware
- redlion:mbnet_mdh_831_firmware
- redlion:mbnet_mdh_835_firmware
- redlion:mbnet_mdh_841_firmware
- redlion:mbnet_mdh_850_firmware
- redlion:mbnet_mdh_855_firmware
- redlion:mbnet_mdh_858_firmware
- redlion:mbnet_mdh_859_firmware
- redlion:mbnet_mdh_871_firmware
- redlion:mbnet_mdh_876_firmware