Bosch Rexroth AG vulnerabilities
26 CVEs and advisories name Bosch Rexroth AG as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-60038A vulnerability has been identified in Rexroth IndraWorks.
- CVE-2025-60037A vulnerability has been identified in Rexroth IndraWorks.
- CVE-2025-60036A vulnerability has been identified in the UA.Testclient utility, which is included in Rexroth IndraWorks.
- CVE-2025-60035A vulnerability has been identified in the OPC.Testclient utility, which is included in Rexroth IndraWorks.
- CVE-2025-48862Ambiguous wording in the web interface of the ctrlX OS setup mechanism could lead the user to believe that the backup file is encrypted when
- CVE-2025-48861A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote, unauthenticated attacker to access and extract in
- CVE-2025-48860A vulnerability in the web application of the ctrlX OS setup mechanism facilitated an authenticated (low privileged) attacker to gain remote
- CVE-2025-27532A vulnerability in the “Backup & Restore” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) att
- CVE-2025-24351A vulnerability in the “Remote Logging” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) atta
- CVE-2025-24350A vulnerability in the “Certificates and Keys” functionality of the web application of ctrlX OS allows a remote authenticated (low-privilege
- CVE-2025-24349A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) a
- CVE-2025-24348A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged)
- CVE-2025-24347A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged)
- CVE-2025-24346A vulnerability in the “Proxy” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to ma
- CVE-2025-24345A vulnerability in the “Hosts” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to m
- CVE-2025-24344A vulnerability in the error notification messages of the web application of ctrlX OS allows a remote unauthenticated attacker to inject arb
- CVE-2025-24343A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) at
- CVE-2025-24342A vulnerability in the login functionality of the web application of ctrlX OS allows a remote unauthenticated attacker to guess valid userna
- CVE-2025-24341A vulnerability in the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to induce a Denial-of-Service (Do
- CVE-2025-24340A vulnerability in the users configuration file of ctrlX OS may allow a remote authenticated (low-privileged) attacker to recover the plaint
- CVE-2025-24339A vulnerability in the web application of ctrlX OS allows a remote unauthenticated attacker to conduct various attacks against users of the
- CVE-2025-24338A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) att
- CVE-2024-48989A vulnerability in the PROFINET stack implementation of the IndraDrive (all versions) of Bosch Rexroth allows an attacker to cause a denial
- CVE-2023-46102The Android Client application, when enrolled to the AppHub server, connects to an MQTT broker to exchange messages and receive commands to
- CVE-2023-45851The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any server authentication.
- CVE-2023-45321The Android Client application, when enrolled with the define method 1 (the user manually inserts the server ip address), use HTTP protocol