<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: bosch-rexroth-ag-ctrlx-os-device-admin</title><description>Every new CVE for bosch-rexroth-ag-ctrlx-os-device-admin.</description><link>https://agentprime.io/</link><item><title>CVE-2025-27532: Cleartext storage of sensitive information in Bosch Rexroth AG ctrlX OS - Device Admin</title><link>https://agentprime.io/advisories/CVE-2025-27532/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-27532/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Apr 2025 11:49:02 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-24351: OS command injection in Bosch Rexroth AG ctrlX OS - Device Admin</title><link>https://agentprime.io/advisories/CVE-2025-24351/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-24351/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Apr 2025 11:47:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-24350: Path traversal in Bosch Rexroth AG ctrlX OS - Device Admin</title><link>https://agentprime.io/advisories/CVE-2025-24350/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-24350/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Apr 2025 11:45:52 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-24349: A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to delete the configuration of physical network int…</title><link>https://agentprime.io/advisories/CVE-2025-24349/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-24349/</guid><description>CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Apr 2025 11:44:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-24348: A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to manipulate the wireless network configuration f…</title><link>https://agentprime.io/advisories/CVE-2025-24348/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-24348/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Apr 2025 11:42:54 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-24347: A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to manipulate the network configuration file via a…</title><link>https://agentprime.io/advisories/CVE-2025-24347/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-24347/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Apr 2025 11:41:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-24346: A vulnerability in the “Proxy” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to manipulate the “/etc/environment” file via a crafted HTTP req…</title><link>https://agentprime.io/advisories/CVE-2025-24346/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-24346/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Apr 2025 11:39:42 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-24345: A vulnerability in the “Hosts” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to manipulate the “hosts” file in an unintended manner via a cr…</title><link>https://agentprime.io/advisories/CVE-2025-24345/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-24345/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Apr 2025 11:35:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-24342: A vulnerability in the login functionality of the web application of ctrlX OS allows a remote unauthenticated attacker to guess valid usernames via multiple crafted HTTP requests.</title><link>https://agentprime.io/advisories/CVE-2025-24342/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-24342/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Apr 2025 11:25:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-24341: Resource allocation without limits in Bosch Rexroth AG ctrlX OS - Device Admin</title><link>https://agentprime.io/advisories/CVE-2025-24341/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-24341/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Apr 2025 11:14:47 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-24340: Weak password hashing in Bosch Rexroth AG ctrlX OS - Device Admin</title><link>https://agentprime.io/advisories/CVE-2025-24340/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-24340/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Apr 2025 10:59:06 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-24339: A vulnerability in the web application of ctrlX OS allows a remote unauthenticated attacker to conduct various attacks against users of the vulnerable system, including web cache poisoning or Man-in-…</title><link>https://agentprime.io/advisories/CVE-2025-24339/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-24339/</guid><description>CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 30 Apr 2025 10:54:56 GMT</pubDate><category>CVE</category></item></channel></rss>