CVE-2021-23857: critical vulnerability in Rexroth IndraMotion MLC L20, L40
Login with hash
Published · Updated
Follow this CVE+ Monitor IndraMotion MLC L20, L40+ Monitor IndraMotion MLC L25, L45, L65, L75, L85, XM21, XM22, XM41 and XM42 IndraMotion XLC
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 10epss 1.2%
Login with hash: The login routine allows the client to log in to the system not by using the password, but by using the hash of the password. Combined with CVE-2021-23858, this allows an attacker to subsequently login to the system.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
Rexroth · IndraMotion MLC L20, L40Rexroth · IndraMotion MLC L25, L45, L65, L75, L85, XM21, XM22, XM41 and XM42 IndraMotion XLCRelated CVEs — Rexroth IndraMotion MLC L20, L40
In the same product, most dangerous first.