ctrlx_hmi_web_panel_wr2110 vulnerabilities

2 known vulnerabilities in ctrlx_hmi_web_panel_wr2110 from Boschrexroth. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  ctrlX HMI Web Panel - WR21 (WR2107): Use of Hard-coded Credentials

  CVE-2023-41372Oct 25, 2023Rexroth

  The vulnerability allows an unprivileged (untrusted) third- party application to arbitrary modify the server settings of the Android Client application, inducing it to connect to an attacker - controlled malicious server.This is possible by forging a valid bro

• 8.8 High severity

  ctrlX HMI Web Panel - WR21 (WR2107): Missing Authentication for Critical Functionality

  CVE-2023-41255Oct 25, 2023Rexroth

  The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on the device itself abusing the lack of authentication of the ‘su’ binary file installed on the device that can be accessed through the ADB (An