Bosch Rexroth vulnerabilities
We track 15 vulnerabilities in Bosch Rexroth products across 9 products. 15 are rated high or critical, and none are known to be exploited. The most recent was published on February 18, 2026.
Latest Bosch Rexroth vulnerabilities
- 8.8 High severity
IndraWorks: Deserialization of Untrusted Data
A vulnerability has been identified in Rexroth IndraWorks. This flaw allows an attacker to execute arbitrary code on the user's system by parsing a manipulated file containing malicious serialized data. Exploitation requires user interaction, specifically open
- 8.8 High severity
IndraWorks: Deserialization of Untrusted Data
A vulnerability has been identified in Rexroth IndraWorks. This flaw allows an attacker to execute arbitrary code on the user's system by parsing a manipulated file containing malicious serialized data. Exploitation requires user interaction, specifically open
- 8.8 High severity
IndraWorks: Deserialization of Untrusted Data
A vulnerability has been identified in the UA.Testclient utility, which is included in Rexroth IndraWorks. All versions prior to 15V24 are affected. This flaw allows an attacker to execute arbitrary code on the user's system by parsing a manipulated file conta
- 8.8 High severity
IndraWorks: Deserialization of Untrusted Data
A vulnerability has been identified in the OPC.Testclient utility, which is included in Rexroth IndraWorks. All versions prior to 15V24 are affected. This flaw allows an attacker to execute arbitrary code on the user's system by parsing a manipulated file cont
- 7.1 High severity
ctrlX OS - Setup: Missing Encryption of Sensitive Data
Ambiguous wording in the web interface of the ctrlX OS setup mechanism could lead the user to believe that the backup file is encrypted when a password is set. However, only the private key - if available in the backup - is encrypted, while the backup file its
- 8.0 High severity
ctrlX OS - Setup: Improper Access Control
A vulnerability in the web application of the ctrlX OS setup mechanism facilitated an authenticated (low privileged) attacker to gain remote access to backup archives created by a user with elevated permissions. Depending on the content of the backup archive,
- 8.8 High severity
ctrlX OS - Device Admin: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the “Remote Logging” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to execute arbitrary OS commands in the context of user “root” via a crafted HTTP request.
- 7.1 High severity
ctrlX OS - Device Admin: Relative Path Traversal
A vulnerability in the “Certificates and Keys” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to write arbitrary certificates in arbitrary file system paths via a crafted HTTP request.
- 7.1 High severity
ctrlX OS - Device Admin: Permissive List of Allowed Inputs
A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to delete the configuration of physical network interfaces via a crafted HTTP request.
- 7.5 High severity
ctrlX OS - Device Admin: Improper Validation of Syntactic Correctness of Input
A vulnerability in the “Proxy” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to manipulate the “/etc/environment” file via a crafted HTTP request.
- 7.1 High severity
ctrlX OS - Solutions: Improper Encoding or Escaping of Output
A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to execute arbitrary client-side code in the context of another user's browser via multiple crafted HTTP requests.
- 7.5 High severity
IndraDrive FWA-INDRV*-MP*: Uncontrolled Resource Consumption
A vulnerability in the PROFINET stack implementation of the IndraDrive (all versions) of Bosch Rexroth allows an attacker to cause a denial of service, rendering the device unresponsive by sending arbitrary UDP messages.
- 8.8 High severity
ctrlX HMI Web Panel - WR21 (WR2107): Use of Hard-coded Credentials
The Android Client application, when enrolled to the AppHub server, connects to an MQTT broker to exchange messages and receive commands to execute on the HMI device. The protocol builds on top of MQTT to implement the remote management of the device is encryp
- 8.8 High severity
ctrlX HMI Web Panel - WR21 (WR2107): Missing Authentication for Critical Functionality
The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any server authentication. This issue allows an attacker to force the Android Client application to connect to a malicious MQTT broker, enabling it
- 8.8 High severity
ctrlX HMI Web Panel - WR21 (WR2107): Cleartext Transmission of Sensitive Information
The Android Client application, when enrolled with the define method 1 (the user manually inserts the server ip address), use HTTP protocol to retrieve sensitive information (ip address and credentials to connect to a remote MQTT broker entity) instead of HTTP