RE
Vendor
Rexroth
524
CVEs
0
On KEV
0
New 30D
Products
NC9.8
Nexo cordless nutrunner NXA011S-36V (0608842011)
Rexroth
25 CVEs0 on KEV0 new
NC9.8
Nexo cordless nutrunner NXA011S-36V-B (0608842012)
Rexroth
25 CVEs0 on KEV0 new
NC9.8
Nexo cordless nutrunner NXA015S-36V (0608842001)
Rexroth
25 CVEs0 on KEV0 new
NC9.8
Nexo cordless nutrunner NXA015S-36V-B (0608842006)
Rexroth
25 CVEs0 on KEV0 new
NC9.8
Nexo cordless nutrunner NXA030S-36V (0608842002)
Rexroth
25 CVEs0 on KEV0 new
NC9.8
Nexo cordless nutrunner NXA030S-36V-B (0608842007)
Rexroth
25 CVEs0 on KEV0 new
NC9.8
Nexo cordless nutrunner NXA050S-36V (0608842003)
Rexroth
25 CVEs0 on KEV0 new
NC9.8
Nexo cordless nutrunner NXA050S-36V-B (0608842008)
Rexroth
25 CVEs0 on KEV0 new
NC9.8
Nexo cordless nutrunner NXA065S-36V (0608842013)
Rexroth
25 CVEs0 on KEV0 new
NC9.8
Nexo cordless nutrunner NXA065S-36V-B (0608842014)
Rexroth
25 CVEs0 on KEV0 new
NC9.8
Nexo cordless nutrunner NXP012QD-36V (0608842005)
Rexroth
25 CVEs0 on KEV0 new
NC9.8
Nexo cordless nutrunner NXP012QD-36V-B (0608842010)
Rexroth
25 CVEs0 on KEV0 new
NC9.8
Nexo cordless nutrunner NXV012T-36V (0608842015)
Rexroth
25 CVEs0 on KEV0 new
NC9.8
Nexo cordless nutrunner NXV012T-36V-B (0608842016)
Rexroth
25 CVEs0 on KEV0 new
NS9.8
Nexo special cordless nutrunner (0608PE2272)
Rexroth
25 CVEs0 on KEV0 new
NS9.8
Nexo special cordless nutrunner (0608PE2301)
Rexroth
25 CVEs0 on KEV0 new
NS9.8
Nexo special cordless nutrunner (0608PE2514)
Rexroth
25 CVEs0 on KEV0 new
NS9.8
Nexo special cordless nutrunner (0608PE2515)
Rexroth
25 CVEs0 on KEV0 new
NS9.8
Nexo special cordless nutrunner (0608PE2666)
Rexroth
25 CVEs0 on KEV0 new
NS9.8
Nexo special cordless nutrunner (0608PE2673)
Rexroth
25 CVEs0 on KEV0 new
CH8.8
ctrlX HMI Web Panel - WR21 (WR2107)
Rexroth
6 CVEs0 on KEV0 new
CH8.8
ctrlX HMI Web Panel - WR21 (WR2110)
Rexroth
6 CVEs0 on KEV0 new
CH8.8
ctrlX HMI Web Panel - WR21 (WR2115)
Rexroth
6 CVEs0 on KEV0 new
IM9.8
IndraMotion MLC L20, L40
Rexroth
3 CVEs0 on KEV0 new
IM7.5
IndraMotion MLC IndraMotion XLC
Rexroth
1 CVEs0 on KEV0 new
IM7.5
IndraMotion MLC L25, L45, L65, L75, L85, XM21, XM22, XM41 and XM42 IndraControl XLC
Rexroth
1 CVEs0 on KEV0 new
IM9.8
IndraMotion MLC L25, L45, L65, L75, L85, XM21, XM22, XM41 and XM42 IndraMotion XLC
Rexroth
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-48266 | NS Nexo special cordless nutrunner (0608PE2673) Rexroth | 9.8 | Jan 10 | The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network… |
| CVE-2023-48265 | NC Nexo cordless nutrunner NXA015S-36V (0608842001) Rexroth | 9.8 | Jan 10 | The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network… |
| CVE-2023-48264 | NS Nexo special cordless nutrunner (0608PE2666) Rexroth | 9.8 | Jan 10 | The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network… |
| CVE-2023-48263 | NC Nexo cordless nutrunner NXA030S-36V (0608842002) Rexroth | 9.8 | Jan 10 | The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network… |
| CVE-2023-48262 | NC Nexo cordless nutrunner NXA015S-36V (0608842001) Rexroth | 9.8 | Jan 10 | The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network… |
| CVE-2023-48261 | NC Nexo cordless nutrunner NXP012QD-36V-B (0608842010) Rexroth | 7.5 | Jan 10 | The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request |
| CVE-2023-48260 | NC Nexo cordless nutrunner NXA015S-36V (0608842001) Rexroth | 7.5 | Jan 10 | The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request |
| CVE-2023-48259 | NC Nexo cordless nutrunner NXA030S-36V-B (0608842007) Rexroth | 7.5 | Jan 10 | The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request |
| CVE-2023-48258 | NC Nexo cordless nutrunner NXA015S-36V (0608842001) Rexroth | 8.1 | Jan 10 | The vulnerability allows a remote attacker to delete arbitrary files on the file system via a crafted URL or HTTP request through a victim’s session |
| CVE-2023-48257 | NC Nexo cordless nutrunner NXA050S-36V-B (0608842008) Rexroth | 8.8 | Jan 10 | The vulnerability allows a remote attacker to access sensitive data inside exported packages or obtain up to Remote Code Execution (RCE) with root privileges on the device |
| CVE-2023-48256 | NS Nexo special cordless nutrunner (0608PE2673) Rexroth | 6.3 | Jan 10 | The vulnerability allows a remote attacker to inject arbitrary HTTP response headers or manipulate HTTP response bodies inside a victim’s session via a crafted URL or HTTP request |
| CVE-2023-48255 | NS Nexo special cordless nutrunner (0608PE2673) Rexroth | 6.1 | Jan 10 | The vulnerability allows an unauthenticated remote attacker to send malicious network requests containing arbitrary client-side script code and obtain its execution inside a… |
| CVE-2023-48254 | NC Nexo cordless nutrunner NXA015S-36V (0608842001) Rexroth | 6.1 | Jan 10 | The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URL or HTTP request |
| CVE-2023-48253 | NS Nexo special cordless nutrunner (0608PE2514) Rexroth | 8.8 | Jan 10 | The vulnerability allows a remote authenticated attacker to read or update arbitrary content of the authentication database via a crafted HTTP request |
| CVE-2023-48252 | NS Nexo special cordless nutrunner (0608PE2673) Rexroth | 8.8 | Jan 10 | The vulnerability allows an authenticated remote attacker to perform actions exceeding their authorized access via crafted HTTP requests |
| CVE-2023-48251 | NS Nexo special cordless nutrunner (0608PE2673) Rexroth | 9.8 | Jan 10 | The vulnerability allows a remote attacker to authenticate to the SSH service with root privileges through a hidden hard-coded account |
| CVE-2023-48250 | NS Nexo special cordless nutrunner (0608PE2673) Rexroth | 9.8 | Jan 10 | The vulnerability allows a remote attacker to authenticate to the web application with high privileges through multiple hidden hard-coded accounts |
| CVE-2023-48249 | NS Nexo special cordless nutrunner (0608PE2673) Rexroth | 6.5 | Jan 10 | The vulnerability allows an authenticated remote attacker to list arbitrary folders in all paths of the system under the context of the application OS user (“root”) via a crafted… |
| CVE-2023-48248 | NS Nexo special cordless nutrunner (0608PE2673) Rexroth | 5.4 | Jan 10 | The vulnerability allows an authenticated remote attacker to upload a malicious file to the SD card containing arbitrary client-side script code and obtain its execution inside a… |
| CVE-2023-48247 | NS Nexo special cordless nutrunner (0608PE2673) Rexroth | 7.5 | Jan 10 | The vulnerability allows an unauthenticated remote attacker to read arbitrary files under the context of the application OS user (“root”) via a crafted HTTP request |
| CVE-2023-48246 | NC Nexo cordless nutrunner NXA030S-36V (0608842002) Rexroth | 6.5 | Jan 10 | The vulnerability allows a remote attacker to download arbitrary files in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request |
| CVE-2023-48245 | NS Nexo special cordless nutrunner (0608PE2673) Rexroth | 9.8 | Jan 10 | The vulnerability allows an unauthenticated remote attacker to upload arbitrary files under the context of the application OS user (“root”) via a crafted HTTP request |
| CVE-2023-48244 | NS Nexo special cordless nutrunner (0608PE2673) Rexroth | 6.1 | Jan 10 | The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URL or HTTP request |
| CVE-2023-48243 | NC Nexo cordless nutrunner NXA015S-36V (0608842001) Rexroth | 8.8 | Jan 10 | The vulnerability allows a remote attacker to upload arbitrary files in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request |
| CVE-2023-48242 | NS Nexo special cordless nutrunner (0608PE2272) Rexroth | 6.5 | Jan 10 | The vulnerability allows an authenticated remote attacker to download arbitrary files in all paths of the system under the context of the application OS user (“root”) via a… |
| CVE-2023-45220 | CH ctrlX HMI Web Panel - WR21 (WR2110) Rexroth | 8.8 | Oct 25 | The Android Client application, when enrolled with the define method 1(the user manually inserts the server ip address), use HTTP protocol to retrieve sensitive information (ip… |
| CVE-2023-41372 | CH ctrlX HMI Web Panel - WR21 (WR2107) Rexroth | 7.8 | Oct 25 | The vulnerability allows an unprivileged (untrusted) third- party application to arbitrary modify the server settings of the Android Client application, inducing it to connect to… |
| CVE-2023-41960 | CH ctrlX HMI Web Panel - WR21 (WR2107) Rexroth | 3.3 | Oct 25 | The vulnerability allows an unprivileged(untrusted) third-party application to interact with a content-provider unsafely exposed by the Android Agent application, potentially… |
| CVE-2023-41255 | CH ctrlX HMI Web Panel - WR21 (WR2110) Rexroth | 8.8 | Oct 25 | The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on the device itself abusing the lack of authentication of… |
| CVE-2023-43488 | CH ctrlX HMI Web Panel - WR21 (WR2115) Rexroth | 7.8 | Oct 25 | The vulnerability allows a low privileged (untrusted) application to modify a critical system property that should be denied, in order to enable the ADB (Android Debug Bridge)… |
| CVE-2023-45844 | CH ctrlX HMI Web Panel - WR21 (WR2110) Rexroth | 6.8 | Oct 25 | The vulnerability allows a low privileged user that have access to the device when locked in Kiosk mode to install an arbitrary Android application and leverage it to have access… |
| CVE-2021-23857 | IM IndraMotion MLC L25, L45, L65, L75, L85, XM21, XM22, XM41 and XM42 IndraMotion XLC Rexroth | 9.8 | Oct 4 | Login with hash |
| CVE-2021-23855 | IM IndraMotion MLC IndraMotion XLC Rexroth | 7.5 | Oct 4 | Information disclosure |
| CVE-2021-23858 | IM IndraMotion MLC L25, L45, L65, L75, L85, XM21, XM22, XM41 and XM42 IndraControl XLC Rexroth | 7.5 | Oct 4 | Information disclosure |
| CVE-2021-23856 | IM IndraMotion MLC L20, L40 Rexroth | 6.1 | Oct 4 | Reflected Cross-Site-Scripting |
