Bosch Rexroth Ag Ctrlx Hmi Web Panel - Wr21 (Wr2107)
3 CVEs affecting Bosch Rexroth Ag Ctrlx Hmi Web Panel - Wr21 (Wr2107). Latest disclosed: 2023-10-25. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-46102 | High | 8.8 | 2023-10-25 | The Android Client application, when enrolled to the AppHub server, connects to an MQTT broker to exchange messages and receive commands to execute on the HMI… |
CVE-2023-45851 | High | 8.8 | 2023-10-25 | The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any server authentication. This issue all… |
CVE-2023-45321 | High | 8.3 | 2023-10-25 | The Android Client application, when enrolled with the define method 1 (the user manually inserts the server ip address), use HTTP protocol to retrieve sensit… |