boschrexroth kayıtları

boschrexroth üreticisine ait 9 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 0
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

9 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
35İzleyin	CVE-2023-45851İstismar yok	The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any server authentication.boschrexroth · ctrlx hmi web panel wr2107 firmware · CWE-306 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek8,8	—	%0,4	25 Eki 2023
35İzleyin	CVE-2023-46102İstismar yok	The Android Client application, when enrolled to the AppHub server, connects to an MQTT broker to exchange messages and receive commands toboschrexroth · ctrlx hmi web panel wr2107 firmware · CWE-798 Kimlik doğrulamasız Gömülü kimlik bilgisi	Yüksek8,8	—	%0,4	25 Eki 2023
35İzleyin	CVE-2023-41255İstismar yok	The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on the device itself abuboschrexroth · ctrlx hmi web panel wr2107 firmware · CWE-306 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek8,8	—	%0,4	25 Eki 2023
35İzleyin	CVE-2023-45220İstismar yok	The Android Client application, when enrolled with the define method 1(the user manually inserts the server ip address), use HTTP protocol tboschrexroth · ctrlx hmi web panel wr2107 firmware · CWE-306 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek8,8	—	%0,3	25 Eki 2023
35İzleyin	CVE-2023-45321İstismar yok	The Android Client application, when enrolled with the define method 1 (the user manually inserts the server ip address), use HTTP protocolboschrexroth · ctrlx hmi web panel wr2107 firmware · CWE-319 Kimlik doğrulamasız Zayıf kripto	Yüksek8,8	—	%0,1	25 Eki 2023
31İzleyin	CVE-2023-41372İstismar yok	The vulnerability allows an unprivileged (untrusted) third- party application to arbitrary modify the server settings of the Android Client boschrexroth · ctrlx hmi web panel wr2107 firmware · CWE-798 Yerel yetki yükseltme Gömülü kimlik bilgisi	Yüksek7,8	—	%0,1	25 Eki 2023
31İzleyin	CVE-2023-43488İstismar yok	The vulnerability allows a low privileged (untrusted) application to modify a critical system property that should be denied, in order to eboschrexroth · ctrlx hmi web panel wr2107 firmware · CWE-862 Yerel yetki yükseltme Erişim denetimi (IDOR)	Yüksek7,8	—	%0,1	25 Eki 2023
27İzleyin	CVE-2023-45844İstismar yok	The vulnerability allows a low privileged user that have access to the device when locked in Kiosk mode to install an arbitrary Android applboschrexroth · ctrlx hmi web panel wr2107 firmware · CWE-284 Erişim denetimi (IDOR)	Orta6,8	—	%0,3	25 Eki 2023
13İzleyin	CVE-2023-41960İstismar yok	The vulnerability allows an unprivileged(untrusted) third-party application to interact with a content-provider unsafely exposed by the Andrboschrexroth · ctrlx hmi web panel wr2107 firmware · CWE-926 Yerel yetki yükseltme	Düşük3,3	—	%0,1	25 Eki 2023

CVE-2023-45851
35İzleyin
The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any server authentication.
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
boschrexroth · ctrlx hmi web panel wr2107 firmware25 Eki 2023
CVE-2023-46102
35İzleyin
The Android Client application, when enrolled to the AppHub server, connects to an MQTT broker to exchange messages and receive commands to
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Gömülü kimlik bilgisi
boschrexroth · ctrlx hmi web panel wr2107 firmware25 Eki 2023
CVE-2023-41255
35İzleyin
The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on the device itself abu
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
boschrexroth · ctrlx hmi web panel wr2107 firmware25 Eki 2023
CVE-2023-45220
35İzleyin
The Android Client application, when enrolled with the define method 1(the user manually inserts the server ip address), use HTTP protocol t
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
boschrexroth · ctrlx hmi web panel wr2107 firmware25 Eki 2023
CVE-2023-45321
35İzleyin
The Android Client application, when enrolled with the define method 1 (the user manually inserts the server ip address), use HTTP protocol
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Zayıf kripto
boschrexroth · ctrlx hmi web panel wr2107 firmware25 Eki 2023
CVE-2023-41372
31İzleyin
The vulnerability allows an unprivileged (untrusted) third- party application to arbitrary modify the server settings of the Android Client
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
- Gömülü kimlik bilgisi
boschrexroth · ctrlx hmi web panel wr2107 firmware25 Eki 2023
CVE-2023-43488
31İzleyin
The vulnerability allows a low privileged (untrusted) application to modify a critical system property that should be denied, in order to e
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
- Erişim denetimi (IDOR)
boschrexroth · ctrlx hmi web panel wr2107 firmware25 Eki 2023
CVE-2023-45844
27İzleyin
The vulnerability allows a low privileged user that have access to the device when locked in Kiosk mode to install an arbitrary Android appl
OrtaCVSS 6,8İstismar yokEPSS %0
- Erişim denetimi (IDOR)
boschrexroth · ctrlx hmi web panel wr2107 firmware25 Eki 2023
CVE-2023-41960
13İzleyin
The vulnerability allows an unprivileged(untrusted) third-party application to interact with a content-provider unsafely exposed by the Andr
DüşükCVSS 3,3İstismar yokEPSS %0
- Yerel yetki yükseltme
boschrexroth · ctrlx hmi web panel wr2107 firmware25 Eki 2023