Rexroth Ctrlx Hmi Web Panel - Wr21 (Wr2115)
6 CVEs affecting Rexroth Ctrlx Hmi Web Panel - Wr21 (Wr2115). Latest disclosed: 2023-10-25. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-45220 | High | 8.8 | 2023-10-25 | The Android Client application, when enrolled with the define method 1(the user manually inserts the server ip address), use HTTP protocol to retrieve sensiti… |
CVE-2023-41255 | High | 8.8 | 2023-10-25 | The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on the device itself abusing the lack of au… |
CVE-2023-43488 | High | 7.9 | 2023-10-25 | The vulnerability allows a low privileged (untrusted) application to modify a critical system property that should be denied, in order to enable the ADB (Andr… |
CVE-2023-41372 | High | 7.8 | 2023-10-25 | The vulnerability allows an unprivileged (untrusted) third- party application to arbitrary modify the server settings of the Android Client application, induci… |
CVE-2023-41960 | High | 7.1 | 2023-10-25 | The vulnerability allows an unprivileged(untrusted) third-party application to interact with a content-provider unsafely exposed by the Android Agent applicati… |
CVE-2023-45844 | Medium | 6.8 | 2023-10-25 | The vulnerability allows a low privileged user that have access to the device when locked in Kiosk mode to install an arbitrary Android application and leverag… |