Helmholz: Multiple vulnerabilities in REX100/REX200/REX250

An attacker with local access to a Helmholz REX controller could execute arbitrary commands with the device's privileges, potentially altering automation logic, stopping production, or modifying control parameters that affect physical processes.

Facilities operating Helmholz REX100, REX200, or REX250 programmable logic controllers (PLCs) used for process automation, manufacturing, or building management systems. This affects anyone using these controllers for local automation tasks.

The vulnerability is command injection—an attacker with local access to the REX controller could inject malicious commands through an input field or interface that the device processes without proper validation. The injected commands would execute with the device's privileges, giving the attacker control over the automation logic and connected equipment.