A highly authenticated attacker can alter the configuration generator by injecting a payload, which the device then passes to the operating system’s execute command without proper validation. This flaw allows the attacker to execute arbitrary code on the device, potentially resulting in total loss of confidentiality, integrity, and availability.

Helmholz REX100, Helmholz REX200/250, MB connect line mbNET.mini, MB connect line mbNET/mbNET.rokey. The affected firmware versions noted in the CPEs are Helmholz REX100 3.0.2, REX200/250 8.4.4, mbNET.mini 3.0.2, and mbNET 8.4.4.

The CVSS score of 7.2 marks the issue as high severity. The EPSS score is not available, and the vulnerability is not listed in CISA KEV. The attack vector is inferred to require authenticated access to the device, as the description refers to a 'highly authenticated attacker.' Once authenticated, the attacker can modify the configuration generator, leading to system command execution and full compromise of the affected device.