A local attacker can exploit a flaw in the cfgparser by inserting a specially crafted file onto a USB stick. When the device reads the file, the parser's confusion attack leads to execution of arbitrary code, enabling total loss of confidentiality, integrity and availability. The weakness is identified as CWE‑1287 because the system fails to validate or sanitize input taken from removable media.

Vendors affected include Helmholz and MB Connect Line. Helmholz REX100 devices running firmware 3.0.2 and REX200/250 devices running firmware 8.4.4 are vulnerable. MB Connect Line devices, specifically mbNET.mini running 3.0.2 and mbNET/mbNET.rokey running 8.4.4, are also impacted.

The CVSS score of 8.4 classifies this as a high‑severity vulnerability. EPSS data is not available, and the issue is not yet listed in CISA KEV, but the attack vector is local, requiring physical access to the device via USB. If exploited, the attacker can gain complete control over the affected device, leading to a full compromise of the system.