A vulnerability in Red Lion Europe mbNET/mbNET.rokey and Helmholz REX 200 and REX 250 devices with firmware lower 7.3.2 allows an authenticated remote attacker with high privileges to inject malicious HTML or JavaScript code (XSS).
| Software | From | Fixed in |
|---|---|---|
| helmholz / rex_250_firmware | - | 7.3.2 |
| helmholz / rex_200_firmware | - | 7.3.2 |
| redlion / mbnet.rokey_rkh_210_firmware | - | 7.3.2 |
| redlion / mbnet.rokey_rkh_216_firmware | - | 7.3.2 |
| redlion / mbnet.rokey_rkh_235_firmware | - | 7.3.2 |
| redlion / mbnet.rokey_rkh_259_firmware | - | 7.3.2 |
| redlion / mbnet_mdh_811_firmware | - | 7.3.2 |
| redlion / mbnet_mdh_850_firmware | - | 7.3.2 |
| redlion / mbnet_mdh_871_firmware | - | 7.3.2 |
| redlion / mbnet_mdh_831_firmware | - | 7.3.2 |
| redlion / mbnet_mdh_855_firmware | - | 7.3.2 |
| redlion / mbnet_mdh_876_firmware | - | 7.3.2 |
| redlion / mbnet_mdh_858_firmware | - | 7.3.2 |
| redlion / mbnet_mdh_816_firmware | - | 7.3.2 |
| redlion / mbnet_mdh_841_firmware | - | 7.3.2 |
| redlion / mbnet_mdh_859_firmware | - | 7.3.2 |
| redlion / mbnet_mdh_835_firmware | - | 7.3.2 |