CH
Product
Ctrlx Hmi Web Panel Wr2107 Firmware
by Boschrexroth · last CVE Oct 25, 2023
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 7Medium 1Low 1
Watch

Add Ctrlx Hmi Web Panel Wr2107 Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-46102
8.8
0%
Oct 25
The Android Client application, when enrolled to the AppHub server, connects to an MQTT broker to exchange messages and receive commands to execute on the HMI device
Affected: All versions, or not specified
CVE-2023-45851
8.8
1%
Oct 25
The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any server authentication.  This issue allows an attacker to…
Affected: All versions, or not specified
CVE-2023-45321
8.8
0%
Oct 25
The Android Client application, when enrolled with the define method 1 (the user manually inserts the server ip address), use HTTP protocol to retrieve sensitive information (ip…
Affected: All versions, or not specified
CVE-2023-45220
8.8
0%
Oct 25
The Android Client application, when enrolled with the define method 1(the user manually inserts the server ip address), use HTTP protocol to retrieve sensitive information (ip…
Affected: All versions, or not specified
CVE-2023-41255
8.8
0%
Oct 25
The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on the device itself abusing the lack of authentication of…
Affected: All versions, or not specified
CVE-2023-41372
7.8
0%
Oct 25
The vulnerability allows an unprivileged (untrusted) third- party application to arbitrary modify the server settings of the Android Client application, inducing it to connect to…
Affected: All versions, or not specified
CVE-2023-43488
7.8
0%
Oct 25
The vulnerability allows a low privileged (untrusted) application to modify a critical system property that should be denied, in order to enable the ADB (Android Debug Bridge)…
Affected: All versions, or not specified
CVE-2023-45844
6.8
0%
Oct 25
The vulnerability allows a low privileged user that have access to the device when locked in Kiosk mode to install an arbitrary Android application and leverage it to have access…
Affected: All versions, or not specified
CVE-2023-41960
3.3
0%
Oct 25
The vulnerability allows an unprivileged(untrusted) third-party application to interact with a content-provider unsafely exposed by the Android Agent application, potentially…
Affected: All versions, or not specified
Showing 9