Advisories · Technology
Bosch Rexroth AG ctrlX OS - Device Admin.
Every CVE that names Bosch Rexroth AG ctrlX OS - Device Admin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
Cleartext storage of sensitive information in Bosch Rexroth AG ctrlX OS - Device Admin
- Bosch Rexroth AG ctrlX OS - Device Admin
- Information disclosure
- CVSS 8.8 High
OS command injection in Bosch Rexroth AG ctrlX OS - Device Admin
- Bosch Rexroth AG ctrlX OS - Device Admin
- Command injection
- CVSS 7.1 High
Path traversal in Bosch Rexroth AG ctrlX OS - Device Admin
- Bosch Rexroth AG ctrlX OS - Device Admin
- Path traversal
- CVSS 7.1 High
A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to delete the configuration of physical network int…
- Bosch Rexroth AG ctrlX OS - Device Admin
- CWE-183
- CVSS 5.4 Medium
A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to manipulate the wireless network configuration f…
- Bosch Rexroth AG ctrlX OS - Device Admin
- CWE-1286
- CVSS 6.5 Medium
A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to manipulate the network configuration file via a…
- Bosch Rexroth AG ctrlX OS - Device Admin
- CWE-1286
- CVSS 7.5 High
A vulnerability in the “Proxy” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to manipulate the “/etc/environment” file via a crafted HTTP req…
- Bosch Rexroth AG ctrlX OS - Device Admin
- CWE-1286
- CVSS 6.3 Medium
A vulnerability in the “Hosts” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to manipulate the “hosts” file in an unintended manner via a cr…
- Bosch Rexroth AG ctrlX OS - Device Admin
- CWE-1286
- CVSS 5.3 Medium
A vulnerability in the login functionality of the web application of ctrlX OS allows a remote unauthenticated attacker to guess valid usernames via multiple crafted HTTP requests.
- Bosch Rexroth AG ctrlX OS - Device Admin
- CWE-204
- CVSS 6.5 Medium
Resource allocation without limits in Bosch Rexroth AG ctrlX OS - Device Admin
- Bosch Rexroth AG ctrlX OS - Device Admin
- Denial of service
- CVSS 6.5 Medium
Weak password hashing in Bosch Rexroth AG ctrlX OS - Device Admin
- Bosch Rexroth AG ctrlX OS - Device Admin
- Weak cryptography or TLS
- CVSS 5.0 Medium
A vulnerability in the web application of ctrlX OS allows a remote unauthenticated attacker to conduct various attacks against users of the vulnerable system, including web cache poisoning or Man-in-…
- Bosch Rexroth AG ctrlX OS - Device Admin
- CWE-644