ctrlx_hmi_web_panel_wr2107 vulnerabilities
5 known vulnerabilities in ctrlx_hmi_web_panel_wr2107 from Boschrexroth. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
ctrlX HMI Web Panel - WR21 (WR2107): Missing Authentication for Critical Functionality
The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any server authentication. This issue allows an attacker to force the Android Client application to connect to a malicious MQTT broker, enabling it
- 8.8 High severity
ctrlX HMI Web Panel - WR21 (WR2107): Cleartext Transmission of Sensitive Information
The Android Client application, when enrolled with the define method 1 (the user manually inserts the server ip address), use HTTP protocol to retrieve sensitive information (ip address and credentials to connect to a remote MQTT broker entity) instead of HTTP
- 8.8 High severity
ctrlX HMI Web Panel - WR21 (WR2107): Missing Authentication for Critical Functionality
The Android Client application, when enrolled with the define method 1(the user manually inserts the server ip address), use HTTP protocol to retrieve sensitive information (ip address and credentials to connect to a remote MQTT broker entity) instead of HTTPS
- 7.8 High severity
ctrlX HMI Web Panel - WR21 (WR2107): Use of Hard-coded Credentials
The vulnerability allows an unprivileged (untrusted) third- party application to arbitrary modify the server settings of the Android Client application, inducing it to connect to an attacker - controlled malicious server.This is possible by forging a valid bro
- 8.8 High severity
ctrlX HMI Web Panel - WR21 (WR2107): Missing Authentication for Critical Functionality
The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on the device itself abusing the lack of authentication of the ‘su’ binary file installed on the device that can be accessed through the ADB (An