CVE-2023-45851highCWE-306

CVE-2023-45851: high-severity vulnerability in Bosch Rexroth AG ctrlX HMI Web Panel - WR21…

Published · Updated

Follow this CVE+ Monitor ctrlX HMI Web Panel - WR21

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.8epss 0.5%
The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any server authentication.  This issue allows an attacker to force the Android Client application to connect to a malicious MQTT broker, enabling it to send fake messages to the HMI device
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Bosch Rexroth AG · ctrlX HMI Web Panel - WR21 (WR2107)Bosch Rexroth AG · ctrlX HMI Web Panel - WR21 (WR2110)Bosch Rexroth AG · ctrlX HMI Web Panel - WR21 (WR2115)
Related CVEs — Bosch Rexroth AG ctrlX HMI Web Panel - WR21…

In the same product, most dangerous first.

CVE-2023-46102HIGHCVE-2023-46102EPSS 0.5%CVE-2023-45321HIGHCVE-2023-45321EPSS 0.1%