Записи boschrexroth
9 опубликованных записей вендора boschrexroth.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 0
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-306 Missing Authentication for Critical Function3
- CWE-798 Use of Hard-coded Credentials2
- CWE-284 Improper Access Control1
- CWE-319 Cleartext Transmission of Sensitive Information1
- CWE-862 Missing Authorization1
- CWE-926 Improper Export of Android Application Components1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
9 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
35Наблюдать | CVE-2023-45851Эксплойта нет | The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any server authentication.boschrexroth · ctrlx hmi web panel wr2107 firmware · CWE-306 | Высокая8,8 | — | 0,5 % | 25 окт. 2023 г. |
35Наблюдать | CVE-2023-46102Эксплойта нет | The Android Client application, when enrolled to the AppHub server, connects to an MQTT broker to exchange messages and receive commands toboschrexroth · ctrlx hmi web panel wr2107 firmware · CWE-798 | Высокая8,8 | — | 0,5 % | 25 окт. 2023 г. |
35Наблюдать | CVE-2023-41255Эксплойта нет | The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on the device itself abuboschrexroth · ctrlx hmi web panel wr2107 firmware · CWE-306 | Высокая8,8 | — | 0,4 % | 25 окт. 2023 г. |
35Наблюдать | CVE-2023-45220Эксплойта нет | The Android Client application, when enrolled with the define method 1(the user manually inserts the server ip address), use HTTP protocol tboschrexroth · ctrlx hmi web panel wr2107 firmware · CWE-306 | Высокая8,8 | — | 0,4 % | 25 окт. 2023 г. |
35Наблюдать | CVE-2023-45321Эксплойта нет | The Android Client application, when enrolled with the define method 1 (the user manually inserts the server ip address), use HTTP protocolboschrexroth · ctrlx hmi web panel wr2107 firmware · CWE-319 | Высокая8,8 | — | 0,1 % | 25 окт. 2023 г. |
31Наблюдать | CVE-2023-41372Эксплойта нет | The vulnerability allows an unprivileged (untrusted) third- party application to arbitrary modify the server settings of the Android Client boschrexroth · ctrlx hmi web panel wr2107 firmware · CWE-798 | Высокая7,8 | — | 0,2 % | 25 окт. 2023 г. |
31Наблюдать | CVE-2023-43488Эксплойта нет | The vulnerability allows a low privileged (untrusted) application to modify a critical system property that should be denied, in order to eboschrexroth · ctrlx hmi web panel wr2107 firmware · CWE-862 | Высокая7,8 | — | 0,2 % | 25 окт. 2023 г. |
27Наблюдать | CVE-2023-45844Эксплойта нет | The vulnerability allows a low privileged user that have access to the device when locked in Kiosk mode to install an arbitrary Android applboschrexroth · ctrlx hmi web panel wr2107 firmware · CWE-284 | Средняя6,8 | — | 0,3 % | 25 окт. 2023 г. |
13Наблюдать | CVE-2023-41960Эксплойта нет | The vulnerability allows an unprivileged(untrusted) third-party application to interact with a content-provider unsafely exposed by the Andrboschrexroth · ctrlx hmi web panel wr2107 firmware · CWE-926 | Низкая3,3 | — | 0,2 % | 25 окт. 2023 г. |
- CVE-2023-4585135Наблюдать
The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any server authentication.
ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %boschrexroth · ctrlx hmi web panel wr2107 firmware25 окт. 2023 г.
- CVE-2023-4610235Наблюдать
The Android Client application, when enrolled to the AppHub server, connects to an MQTT broker to exchange messages and receive commands to
ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %boschrexroth · ctrlx hmi web panel wr2107 firmware25 окт. 2023 г.
- CVE-2023-4125535Наблюдать
The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on the device itself abu
ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %boschrexroth · ctrlx hmi web panel wr2107 firmware25 окт. 2023 г.
- CVE-2023-4522035Наблюдать
The Android Client application, when enrolled with the define method 1(the user manually inserts the server ip address), use HTTP protocol t
ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %boschrexroth · ctrlx hmi web panel wr2107 firmware25 окт. 2023 г.
- CVE-2023-4532135Наблюдать
The Android Client application, when enrolled with the define method 1 (the user manually inserts the server ip address), use HTTP protocol
ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %boschrexroth · ctrlx hmi web panel wr2107 firmware25 окт. 2023 г.
- CVE-2023-4137231Наблюдать
The vulnerability allows an unprivileged (untrusted) third- party application to arbitrary modify the server settings of the Android Client
ВысокаяCVSS 7,8Эксплойта нетEPSS 0 %boschrexroth · ctrlx hmi web panel wr2107 firmware25 окт. 2023 г.
- CVE-2023-4348831Наблюдать
The vulnerability allows a low privileged (untrusted) application to modify a critical system property that should be denied, in order to e
ВысокаяCVSS 7,8Эксплойта нетEPSS 0 %boschrexroth · ctrlx hmi web panel wr2107 firmware25 окт. 2023 г.
- CVE-2023-4584427Наблюдать
The vulnerability allows a low privileged user that have access to the device when locked in Kiosk mode to install an arbitrary Android appl
СредняяCVSS 6,8Эксплойта нетEPSS 0 %boschrexroth · ctrlx hmi web panel wr2107 firmware25 окт. 2023 г.
- CVE-2023-4196013Наблюдать
The vulnerability allows an unprivileged(untrusted) third-party application to interact with a content-provider unsafely exposed by the Andr
НизкаяCVSS 3,3Эксплойта нетEPSS 0 %boschrexroth · ctrlx hmi web panel wr2107 firmware25 окт. 2023 г.