Rexroth Indramotion Mlc L40 Firmware vulnerabilities

Product

Rexroth Indramotion Mlc L40 Firmware

by Bosch · last CVE Oct 4, 2021

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 1High 1Medium 1Low 0

Severity

Exploitation

Watch

Add Rexroth Indramotion Mlc L40 Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-23857	9.8	1%	Oct 4	Login with hash: The login routine allows the client to log in to the system not by using the password, but by using the hash of the password Affected: through 12
CVE-2021-23858	7.5	1%	Oct 4	Information disclosure: The main configuration, including users and their hashed passwords, is exposed by an unprotected web server resource and can be accessed without… Affected: through 12
CVE-2021-23856	6.1	1%	Oct 4	The web server is vulnerable to reflected XSS and therefore an attacker might be able to execute scripts on a client’s computer by sending the client a manipulated URL Affected: All versions, or not specified