ctrlX HMI Web Panel - WR21 (WR2110) vulnerabilities

Product

ctrlX HMI Web Panel - WR21 (WR2110)

by Bosch Rexroth AG · last CVE Oct 25, 2023

CVEs

On KEV

8.8

Max CVSS

New 30D

Severity mix

Critical 0High 3Medium 0Low 0

Severity

Exploitation

Watch

Add ctrlX HMI Web Panel - WR21 (WR2110) to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-46102	8.8	0%	Oct 25	The Android Client application, when enrolled to the AppHub server, connects to an MQTT broker to exchange messages and receive commands to execute on the HMI device Affected: All versions, or not specified
CVE-2023-45851	8.8	1%	Oct 25	The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any server authentication. This issue allows an attacker to… Affected: All versions, or not specified
CVE-2023-45321	8.8	0%	Oct 25	The Android Client application, when enrolled with the define method 1 (the user manually inserts the server ip address), use HTTP protocol to retrieve sensitive information (ip… Affected: All versions, or not specified