CVE-2026-40851 - Vulnerability Details - OpenCVE

A local attacker can perform a confusion attack on the cfgparser via a specially crafted file on an USB stick leading to code execution. This can result in a total loss of confidentiality, integrity and availability.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Vendors	Products
Helmholz	Rex100 Rex200 250
Mb Connect Line	Mbnet Mbnet.mini Mbnet Mbnet.rokey

No data.

No data.

No data.

References

Link	Providers
https://www.certvde.com/en/advisories/VDE-2026-054/

History

Wed, 27 May 2026 09:00:00 +0000

Type	Values Removed	Values Added
Description		A local attacker can perform a confusion attack on the cfgparser via a specially crafted file on an USB stick leading to code execution. This can result in a total loss of confidentiality, integrity and availability.
Title		Command injection via USB
First Time appeared		Helmholz Helmholz rex100 Helmholz rex200 250 Mb Connect Line Mb Connect Line mbnet Mb Connect Line mbnet.mini Mb Connect Line mbnet Mbnet.rokey
Weaknesses		CWE-1287
CPEs		cpe:2.3:a:helmholz:rex100:::::::: cpe:2.3:a:helmholz:rex200_250:::::::: cpe:2.3:a:mb_connect_line:mbnet.mini:::::::: cpe:2.3:a:mb_connect_line:mbnet_mbnet.rokey:::::::: cpe:2.3:o:helmholz:rex100:3.0.2:::::::* cpe:2.3:o:helmholz:rex200_250:8.4.4:::::::* cpe:2.3:o:mb_connect_line:mbnet.mini:3.0.2:::::::* cpe:2.3:o:mb_connect_line:mbnet:8.4.4:::::::*
Vendors & Products		Helmholz Helmholz rex100 Helmholz rex200 250 Mb Connect Line Mb Connect Line mbnet Mb Connect Line mbnet.mini Mb Connect Line mbnet Mbnet.rokey
References		https://www.certvde.com/en/advisories/VDE-2026-054/
Metrics		cvssV3_1 `{'score': 8.4, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: CERTVDE

Published: 2026-05-27T08:06:21.815Z

Updated: 2026-05-27T08:06:21.815Z

Reserved: 2026-04-15T09:33:02.614Z

Link: CVE-2026-40851

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-05-27T09:16:31.687

Modified: 2026-05-27T09:16:31.687

Link: CVE-2026-40851

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-40851", "assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "state": "PUBLISHED", "assignerShortName": "CERTVDE", "dateReserved": "2026-04-15T09:33:02.614Z", "datePublished": "2026-05-27T08:06:21.815Z", "dateUpdated": "2026-05-27T08:06:21.815Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "mbNET/mbNET.rokey", "vendor": "MB connect line", "versions": [{"lessThanOrEqual": "8.4.4", "status": "affected", "version": "0.0.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "mbNET.mini", "vendor": "MB connect line", "versions": [{"lessThanOrEqual": "3.0.2", "status": "affected", "version": "0.0.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "mbNET/mbNET.rokey", "vendor": "MB connect line", "versions": [{"status": "affected", "version": "8.4.4"}]}, {"defaultStatus": "unaffected", "product": "mbNET.mini", "vendor": "MB connect line", "versions": [{"status": "affected", "version": "3.0.2"}]}, {"defaultStatus": "unaffected", "product": "REX200/250", "vendor": "Helmholz", "versions": [{"lessThanOrEqual": "8.4.4", "status": "affected", "version": "0.0.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "REX100", "vendor": "Helmholz", "versions": [{"lessThanOrEqual": "3.0.2", "status": "affected", "version": "0.0.0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "REX200/250", "vendor": "Helmholz", "versions": [{"status": "affected", "version": "8.4.4"}]}, {"defaultStatus": "unaffected", "product": "REX100", "vendor": "Helmholz", "versions": [{"status": "affected", "version": "3.0.2"}]}], "cpeApplicability": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mb_connect_line:mbnet_mbnet.rokey:*:*:*:*:*:*:*:*", "versionEndIncluding": "8.4.4", "versionStartIncluding": "0.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "OR"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mb_connect_line:mbnet.mini:*:*:*:*:*:*:*:*", "versionEndIncluding": "3.0.2", "versionStartIncluding": "0.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "OR"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mb_connect_line:mbnet:8.4.4:*:*:*:*:*:*:*", "versionStartIncluding": "8.4.4", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "OR"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:mb_connect_line:mbnet.mini:3.0.2:*:*:*:*:*:*:*", "versionStartIncluding": "3.0.2", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "OR"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:helmholz:rex200_250:*:*:*:*:*:*:*:*", "versionEndIncluding": "8.4.4", "versionStartIncluding": "0.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "OR"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:helmholz:rex100:*:*:*:*:*:*:*:*", "versionEndIncluding": "3.0.2", "versionStartIncluding": "0.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "OR"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:helmholz:rex200_250:8.4.4:*:*:*:*:*:*:*", "versionStartIncluding": "8.4.4", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "OR"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:helmholz:rex100:3.0.2:*:*:*:*:*:*:*", "versionStartIncluding": "3.0.2", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "OR"}], "credits": [{"lang": "en", "type": "finder", "value": "Moritz Abrell from SySS GmbH"}, {"lang": "en", "type": "finder", "value": "Christian Z\u00e4ske from SySS GmbH"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>A local attacker can perform a confusion attack on the cfgparser via a specially crafted file on an USB stick leading to code execution. This can result in a total loss of confidentiality, integrity and availability.</p>"}], "value": "A local attacker can perform a confusion attack on the cfgparser via a specially crafted file on an USB stick leading to code execution. This can result in a total loss of confidentiality, integrity and availability."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-1287", "description": "CWE-1287 Improper Validation of Specified Type of Input", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE", "dateUpdated": "2026-05-27T08:06:21.815Z"}, "references": [{"url": "https://www.certvde.com/en/advisories/VDE-2026-054/"}], "source": {"advisory": "VDE-2026-054", "defect": ["CERT@VDE#642070"], "discovery": "UNKNOWN"}, "title": "Command injection via USB", "x_generator": {"engine": "Vulnogram 0.4.0"}}}}