# cve.now: Bosch Rexroth AG

The newest entries naming Bosch Rexroth AG as an affected vendor (up to 200), of 26 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2025-60038](https://cve.now/CVE-2025-60038.md): A vulnerability has been identified in Rexroth IndraWorks. (CVSS 7.8)
- [CVE-2025-60037](https://cve.now/CVE-2025-60037.md): A vulnerability has been identified in Rexroth IndraWorks. (CVSS 7.8)
- [CVE-2025-60036](https://cve.now/CVE-2025-60036.md): A vulnerability has been identified in the UA.Testclient utility, which is included in Rexroth IndraWorks. (CVSS 7.8)
- [CVE-2025-60035](https://cve.now/CVE-2025-60035.md): A vulnerability has been identified in the OPC.Testclient utility, which is included in Rexroth IndraWorks. (CVSS 7.8)
- [CVE-2025-48862](https://cve.now/CVE-2025-48862.md): Ambiguous wording in the web interface of the ctrlX OS setup mechanism could lead the user to believe that the backup file is encrypted when (CVSS 7.1)
- [CVE-2025-48861](https://cve.now/CVE-2025-48861.md): A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote, unauthenticated attacker to access and extract in (CVSS 5.3)
- [CVE-2025-48860](https://cve.now/CVE-2025-48860.md): A vulnerability in the web application of the ctrlX OS setup mechanism facilitated an authenticated (low privileged) attacker to gain remote (CVSS 8.0)
- [CVE-2025-27532](https://cve.now/CVE-2025-27532.md): A vulnerability in the “Backup & Restore” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) att (CVSS 6.5)
- [CVE-2025-24351](https://cve.now/CVE-2025-24351.md): A vulnerability in the “Remote Logging” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) atta (CVSS 8.8)
- [CVE-2025-24350](https://cve.now/CVE-2025-24350.md): A vulnerability in the “Certificates and Keys” functionality of the web application of ctrlX OS allows a remote authenticated (low-privilege (CVSS 7.1)
- [CVE-2025-24349](https://cve.now/CVE-2025-24349.md): A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) a (CVSS 7.1)
- [CVE-2025-24348](https://cve.now/CVE-2025-24348.md): A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) (CVSS 5.4)
- [CVE-2025-24347](https://cve.now/CVE-2025-24347.md): A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) (CVSS 6.5)
- [CVE-2025-24346](https://cve.now/CVE-2025-24346.md): A vulnerability in the “Proxy” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to ma (CVSS 7.5)
- [CVE-2025-24345](https://cve.now/CVE-2025-24345.md): A vulnerability in the “Hosts” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to m (CVSS 6.3)
- [CVE-2025-24344](https://cve.now/CVE-2025-24344.md): A vulnerability in the error notification messages of the web application of ctrlX OS allows a remote unauthenticated attacker to inject arb (CVSS 6.3)
- [CVE-2025-24343](https://cve.now/CVE-2025-24343.md): A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) at (CVSS 5.4)
- [CVE-2025-24342](https://cve.now/CVE-2025-24342.md): A vulnerability in the login functionality of the web application of ctrlX OS allows a remote unauthenticated attacker to guess valid userna (CVSS 5.3)
- [CVE-2025-24341](https://cve.now/CVE-2025-24341.md): A vulnerability in the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to induce a Denial-of-Service (Do (CVSS 6.5)
- [CVE-2025-24340](https://cve.now/CVE-2025-24340.md): A vulnerability in the users configuration file of ctrlX OS may allow a remote authenticated (low-privileged) attacker to recover the plaint (CVSS 6.5)
- [CVE-2025-24339](https://cve.now/CVE-2025-24339.md): A vulnerability in the web application of ctrlX OS allows a remote unauthenticated attacker to conduct various attacks against users of the (CVSS 5.0)
- [CVE-2025-24338](https://cve.now/CVE-2025-24338.md): A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) att (CVSS 7.1)
- [CVE-2024-48989](https://cve.now/CVE-2024-48989.md): A vulnerability in the PROFINET stack implementation of the IndraDrive (all versions) of Bosch Rexroth allows an attacker to cause a denial (CVSS 7.5)
- [CVE-2023-46102](https://cve.now/CVE-2023-46102.md): The Android Client application, when enrolled to the AppHub server, connects to an MQTT broker to exchange messages and receive commands to (CVSS 8.8)
- [CVE-2023-45851](https://cve.now/CVE-2023-45851.md): The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any server authentication. (CVSS 8.8)
- [CVE-2023-45321](https://cve.now/CVE-2023-45321.md): The Android Client application, when enrolled with the define method 1 (the user manually inserts the server ip address), use HTTP protocol (CVSS 8.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/bosch-rexroth
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.