CVE-2023-45851highCWE-306

CVE-2023-45851: falha de alta gravidade em Bosch Rexroth AG ctrlX HMI Web Panel - WR21…

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar ctrlX HMI Web Panel - WR21

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.8epss 0.5%
The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any server authentication.  This issue allows an attacker to force the Android Client application to connect to a malicious MQTT broker, enabling it to send fake messages to the HMI device
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Bosch Rexroth AG · ctrlX HMI Web Panel - WR21 (WR2107)Bosch Rexroth AG · ctrlX HMI Web Panel - WR21 (WR2110)Bosch Rexroth AG · ctrlX HMI Web Panel - WR21 (WR2115)
CVEs relacionadas — Bosch Rexroth AG ctrlX HMI Web Panel - WR21…

No mesmo produto, das mais perigosas para as menos.

CVE-2023-46102HIGHCVE-2023-46102EPSS 0.5%CVE-2023-45321HIGHCVE-2023-45321EPSS 0.1%