BO
Vendor
Boschrexroth
39
CVEs
0
On KEV
0
New 30D
Products
CH8.8
Ctrlx Hmi Web Panel Wr2107 Firmware
Boschrexroth
9 CVEs0 on KEV0 new
CH8.8
Ctrlx Hmi Web Panel Wr2110 Firmware
Boschrexroth
9 CVEs0 on KEV0 new
CH8.8
Ctrlx Hmi Web Panel Wr2115 Firmware
Boschrexroth
9 CVEs0 on KEV0 new
CH8.8
Ctrlx Hmi Web Panel Wr2107
Boschrexroth
6 CVEs0 on KEV0 new
CH8.8
Ctrlx Hmi Web Panel Wr2110
Boschrexroth
3 CVEs0 on KEV0 new
CH8.8
Ctrlx Hmi Web Panel Wr2115
Boschrexroth
3 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-46102 | CH Ctrlx Hmi Web Panel Wr2115 Firmware Boschrexroth | 8.8 | Oct 25 | The Android Client application, when enrolled to the AppHub server, connects to an MQTT broker to exchange messages and receive commands to execute on the HMI device |
| CVE-2023-45851 | CH Ctrlx Hmi Web Panel Wr2110 Firmware Boschrexroth | 8.8 | Oct 25 | The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any server authentication. This issue allows an attacker to… |
| CVE-2023-45321 | CH Ctrlx Hmi Web Panel Wr2115 Firmware Boschrexroth | 8.8 | Oct 25 | The Android Client application, when enrolled with the define method 1 (the user manually inserts the server ip address), use HTTP protocol to retrieve sensitive information (ip… |
| CVE-2023-45220 | CH Ctrlx Hmi Web Panel Wr2107 Firmware Boschrexroth | 8.8 | Oct 25 | The Android Client application, when enrolled with the define method 1(the user manually inserts the server ip address), use HTTP protocol to retrieve sensitive information (ip… |
| CVE-2023-41372 | CH Ctrlx Hmi Web Panel Wr2107 Firmware Boschrexroth | 7.8 | Oct 25 | The vulnerability allows an unprivileged (untrusted) third- party application to arbitrary modify the server settings of the Android Client application, inducing it to connect to… |
| CVE-2023-41960 | CH Ctrlx Hmi Web Panel Wr2107 Firmware Boschrexroth | 3.3 | Oct 25 | The vulnerability allows an unprivileged(untrusted) third-party application to interact with a content-provider unsafely exposed by the Android Agent application, potentially… |
| CVE-2023-41255 | CH Ctrlx Hmi Web Panel Wr2107 Firmware Boschrexroth | 8.8 | Oct 25 | The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on the device itself abusing the lack of authentication of… |
| CVE-2023-43488 | CH Ctrlx Hmi Web Panel Wr2107 Firmware Boschrexroth | 7.8 | Oct 25 | The vulnerability allows a low privileged (untrusted) application to modify a critical system property that should be denied, in order to enable the ADB (Android Debug Bridge)… |
| CVE-2023-45844 | CH Ctrlx Hmi Web Panel Wr2115 Firmware Boschrexroth | 6.8 | Oct 25 | The vulnerability allows a low privileged user that have access to the device when locked in Kiosk mode to install an arbitrary Android application and leverage it to have access… |