Dashboard / CVE-2023-34412

CVE-2023-34412

INFO Priority: 0.00 BB Relevance: 0/100
Published: 2023-08-17 Modified: 2026-11-10 First seen: 2026-11-10 Status: pending_score

Description

A vulnerability in Red Lion Europe mbNET/mbNET.rokey and Helmholz REX 200 and REX 250 devices with firmware lower 7.3.2 allows an authenticated remote attacker with high privileges to inject malicious HTML or JavaScript code (XSS).

Weakness Classification (1)

Affected Software (17)

VendorProductVersion
helmholz rex_200_firmware < 7.3.2
helmholz rex_250_firmware < 7.3.2
redlion mbnet.rokey_rkh_210_firmware < 7.3.2
redlion mbnet.rokey_rkh_216_firmware < 7.3.2
redlion mbnet.rokey_rkh_235_firmware < 7.3.2
redlion mbnet.rokey_rkh_259_firmware < 7.3.2
redlion mbnet_mdh_811_firmware < 7.3.2
redlion mbnet_mdh_816_firmware < 7.3.2
redlion mbnet_mdh_831_firmware < 7.3.2
redlion mbnet_mdh_835_firmware < 7.3.2
redlion mbnet_mdh_841_firmware < 7.3.2
redlion mbnet_mdh_850_firmware < 7.3.2
redlion mbnet_mdh_855_firmware < 7.3.2
redlion mbnet_mdh_858_firmware < 7.3.2
redlion mbnet_mdh_859_firmware < 7.3.2
redlion mbnet_mdh_871_firmware < 7.3.2
redlion mbnet_mdh_876_firmware < 7.3.2

References & Advisories (2)

Bug Bounty Relevance

0 / 100

CVSS Score

Unscored

EPSS — Exploitation Probability

0.43%
Raw Score 0.004300
Percentile 37.7%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00430
2026-11-13
0.00430
2026-11-12
0.00430
2026-11-10
0.00430
2026-11-09
0.00430

Intelligence Sources

nvd ref →

External Links