Advisories · Technology

Rexroth ctrlX HMI Web Panel - WR21 (WR2115).

Every CVE that names Rexroth ctrlX HMI Web Panel - WR21 (WR2115) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-45220 CVE record

CVSS 8.8 High

Missing authentication in Rexroth ctrlX HMI Web Panel - WR21 (WR2107) and others
- Rexroth ctrlX HMI Web Panel - WR21 (WR2107)
- Rexroth ctrlX HMI Web Panel - WR21 (WR2110)
- Authentication bypass
Not analysed yet 25 Oct 2023
CVE-2023-41372 CVE record

CVSS 7.8 High

Hard-coded credentials in Rexroth ctrlX HMI Web Panel - WR21 (WR2107) and others
- Rexroth ctrlX HMI Web Panel - WR21 (WR2107)
- Rexroth ctrlX HMI Web Panel - WR21 (WR2110)
- Hard-coded credentials
Not analysed yet 25 Oct 2023
CVE-2023-41960 CVE record

CVSS 7.1 High

Exported Android component in Rexroth ctrlX HMI Web Panel - WR21 (WR2107) and others
- Rexroth ctrlX HMI Web Panel - WR21 (WR2107)
- Rexroth ctrlX HMI Web Panel - WR21 (WR2110)
- CWE-926
Not analysed yet 25 Oct 2023
CVE-2023-41255 CVE record

CVSS 8.8 High

Missing authentication in Rexroth ctrlX HMI Web Panel - WR21 (WR2107) and others
- Rexroth ctrlX HMI Web Panel - WR21 (WR2107)
- Rexroth ctrlX HMI Web Panel - WR21 (WR2110)
- Authentication bypass
Not analysed yet 25 Oct 2023
CVE-2023-43488 CVE record

CVSS 7.9 High

Missing authorization in Rexroth ctrlX HMI Web Panel - WR21 (WR2107) and others
- Rexroth ctrlX HMI Web Panel - WR21 (WR2107)
- Rexroth ctrlX HMI Web Panel - WR21 (WR2110)
- Broken access control
Not analysed yet 25 Oct 2023
CVE-2023-45844 CVE record

CVSS 7.3 High

Improper access control in Rexroth ctrlX HMI Web Panel - WR21 (WR2107) and others
- Rexroth ctrlX HMI Web Panel - WR21 (WR2107)
- Rexroth ctrlX HMI Web Panel - WR21 (WR2110)
- Broken access control
Not analysed yet 25 Oct 2023