CVE-2023-4834

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

In Red Lion Europe mbCONNECT24 and mymbCONNECT24 and Helmholz myREX24 and myREX24.virtual up to and including 2.14.2 an improperly implemented access validation allows an authenticated, low privileged attacker to gain read access to limited, non-critical device information in his account he should not have access to.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-269

Affected software

No affected versions have been published.

Timeline

Published
Oct 16, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-483405.5In video decoder, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with CVE-2023-483415.5In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with nCVE-2023-483424.4In media service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with SysCVE-2023-483435.5In video decoder, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with CVE-2023-483445.5In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with nCVE-2023-483455.5In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with nCVE-2023-483465.5In video decoder, there is a possible improper input validation. This could lead to local denial of service with no additional execution priCVE-2023-483475.5In video decoder, there is a possible out of bounds read due to improper input validation. This could lead to local denial of service with nCVE-2023-483485.5In video decoder, there is a possible out of bounds write due to improper input validation. This could lead to local denial of service with CVE-2023-483495.5In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no CVE-2023-48359.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CF Software Oil Management Software alCVE-2023-483505.5In video decoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no
CVE-2023-4834: Medium severity, CVSS 4.3 | Vulnix