ctrlX OS - Device Admin vulnerabilities
4 known vulnerabilities in ctrlX OS - Device Admin from Bosch Rexroth. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
ctrlX OS - Device Admin: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the “Remote Logging” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to execute arbitrary OS commands in the context of user “root” via a crafted HTTP request.
- 7.1 High severity
ctrlX OS - Device Admin: Relative Path Traversal
A vulnerability in the “Certificates and Keys” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to write arbitrary certificates in arbitrary file system paths via a crafted HTTP request.
- 7.1 High severity
ctrlX OS - Device Admin: Permissive List of Allowed Inputs
A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to delete the configuration of physical network interfaces via a crafted HTTP request.
- 7.5 High severity
ctrlX OS - Device Admin: Improper Validation of Syntactic Correctness of Input
A vulnerability in the “Proxy” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to manipulate the “/etc/environment” file via a crafted HTTP request.