CVE-2023-41255highCWE-306

CVE-2023-41255: high-severity vulnerability in Rexroth ctrlX HMI Web Panel - WR21 (WR2107)

Published · Updated

Follow this CVE+ Monitor ctrlX HMI Web Panel - WR21

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 0.5%
The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on the device itself abusing the lack of authentication of the ‘su’ binary file installed on the device that can be accessed through the ADB (Android Debug Bridge) protocol exposed on the network.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Rexroth · ctrlX HMI Web Panel - WR21 (WR2107)Rexroth · ctrlX HMI Web Panel - WR21 (WR2110)Rexroth · ctrlX HMI Web Panel - WR21 (WR2115)
Related CVEs — Rexroth ctrlX HMI Web Panel - WR21 (WR2107)

In the same product, most dangerous first.

CVE-2023-45220HIGHCVE-2023-45220EPSS 0.5%CVE-2023-45844HIGHCVE-2023-45844EPSS 0.4%CVE-2023-41372HIGHCVE-2023-41372EPSS 0.2%CVE-2023-43488HIGHCVE-2023-43488EPSS 0.2%CVE-2023-41960HIGHCVE-2023-41960EPSS 0.2%