Rexroth vulnerabilities
We track 14 vulnerabilities in Rexroth products across 23 products. 14 are rated high or critical, and none are known to be exploited. The most recent was published on January 10, 2024.
Latest Rexroth vulnerabilities
- 9.8 Critical severity
Nexo cordless nutrunner NXA015S-36V (0608842001): Out-of-bounds Write
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request.
- 9.8 Critical severity
Nexo cordless nutrunner NXA015S-36V (0608842001): Out-of-bounds Write
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request.
- 9.8 Critical severity
Nexo cordless nutrunner NXA015S-36V (0608842001): Out-of-bounds Write
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request.
- 9.8 Critical severity
Nexo cordless nutrunner NXA015S-36V (0608842001): Out-of-bounds Write
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request.
- 9.8 Critical severity
Nexo cordless nutrunner NXA015S-36V (0608842001): Out-of-bounds Write
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request.
- 8.8 High severity
Nexo cordless nutrunner NXA015S-36V (0608842001): Improper Authentication
The vulnerability allows a remote attacker to access sensitive data inside exported packages or obtain up to Remote Code Execution (RCE) with root privileges on the device. The vulnerability can be exploited directly by authenticated users, via crafted HTTP re
- 8.8 High severity
Nexo cordless nutrunner NXA015S-36V (0608842001): Improper Neutralization of Special Elements used in an SQL Command
The vulnerability allows a remote authenticated attacker to read or update arbitrary content of the authentication database via a crafted HTTP request. By abusing this vulnerability it is possible to exfiltrate other users’ password hashes or update them with
- 7.5 High severity
Nexo cordless nutrunner NXA015S-36V (0608842001): Missing Authorization
The vulnerability allows an unauthenticated remote attacker to read arbitrary files under the context of the application OS user (“root”) via a crafted HTTP request.
- 9.8 Critical severity
Nexo cordless nutrunner NXA015S-36V (0608842001): Missing Authorization
The vulnerability allows an unauthenticated remote attacker to upload arbitrary files under the context of the application OS user (“root”) via a crafted HTTP request.
- 8.8 High severity
Nexo cordless nutrunner NXA015S-36V (0608842001): Improper Limitation of a Pathname to a Restricted Directory
The vulnerability allows a remote attacker to upload arbitrary files in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request. By abusing this vulnerability, it is possible to obtain remote code execution (RCE
- 8.8 High severity
ctrlX HMI Web Panel - WR21 (WR2107): Missing Authentication for Critical Functionality
The Android Client application, when enrolled with the define method 1(the user manually inserts the server ip address), use HTTP protocol to retrieve sensitive information (ip address and credentials to connect to a remote MQTT broker entity) instead of HTTPS
- 7.8 High severity
ctrlX HMI Web Panel - WR21 (WR2107): Missing Authorization
The vulnerability allows a low privileged (untrusted) application to modify a critical system property that should be denied, in order to enable the ADB (Android Debug Bridge) protocol to be exposed on the network, exploiting it to gain a privileged shell on t
- 7.8 High severity
ctrlX HMI Web Panel - WR21 (WR2107): Use of Hard-coded Credentials
The vulnerability allows an unprivileged (untrusted) third- party application to arbitrary modify the server settings of the Android Client application, inducing it to connect to an attacker - controlled malicious server.This is possible by forging a valid bro
- 8.8 High severity
ctrlX HMI Web Panel - WR21 (WR2107): Missing Authentication for Critical Functionality
The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on the device itself abusing the lack of authentication of the ‘su’ binary file installed on the device that can be accessed through the ADB (An