# cve.now: Rexroth

The newest entries naming Rexroth as an affected vendor (up to 200), of 35 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2023-48266](https://cve.now/CVE-2023-48266.md): The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Exe (CVSS 8.1)
- [CVE-2023-48265](https://cve.now/CVE-2023-48265.md): The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Exe (CVSS 8.1)
- [CVE-2023-48264](https://cve.now/CVE-2023-48264.md): The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Exe (CVSS 8.1)
- [CVE-2023-48263](https://cve.now/CVE-2023-48263.md): The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Exe (CVSS 8.1)
- [CVE-2023-48262](https://cve.now/CVE-2023-48262.md): The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Exe (CVSS 8.1)
- [CVE-2023-48261](https://cve.now/CVE-2023-48261.md): The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request. (CVSS 5.3)
- [CVE-2023-48260](https://cve.now/CVE-2023-48260.md): The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request. (CVSS 5.3)
- [CVE-2023-48259](https://cve.now/CVE-2023-48259.md): The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request. (CVSS 5.3)
- [CVE-2023-48258](https://cve.now/CVE-2023-48258.md): The vulnerability allows a remote attacker to delete arbitrary files on the file system via a crafted URL or HTTP request through a victim’ (CVSS 5.5)
- [CVE-2023-48257](https://cve.now/CVE-2023-48257.md): The vulnerability allows a remote attacker to access sensitive data inside exported packages or obtain up to Remote Code Execution (RCE) wit (CVSS 7.8)
- [CVE-2023-48256](https://cve.now/CVE-2023-48256.md): The vulnerability allows a remote attacker to inject arbitrary HTTP response headers or manipulate HTTP response bodies inside a victim’s se (CVSS 5.3)
- [CVE-2023-48255](https://cve.now/CVE-2023-48255.md): The vulnerability allows an unauthenticated remote attacker to send malicious network requests containing arbitrary client-side script code (CVSS 6.3)
- [CVE-2023-48254](https://cve.now/CVE-2023-48254.md): The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted U (CVSS 5.3)
- [CVE-2023-48253](https://cve.now/CVE-2023-48253.md): The vulnerability allows a remote authenticated attacker to read or update arbitrary content of the authentication database via a crafted HT (CVSS 8.8)
- [CVE-2023-48252](https://cve.now/CVE-2023-48252.md): The vulnerability allows an authenticated remote attacker to perform actions exceeding their authorized access via crafted HTTP requests. (CVSS 8.8)
- [CVE-2023-48251](https://cve.now/CVE-2023-48251.md): The vulnerability allows a remote attacker to authenticate to the SSH service with root privileges through a hidden hard-coded account. (CVSS 8.1)
- [CVE-2023-48250](https://cve.now/CVE-2023-48250.md): The vulnerability allows a remote attacker to authenticate to the web application with high privileges through multiple hidden hard-coded ac (CVSS 8.1)
- [CVE-2023-48249](https://cve.now/CVE-2023-48249.md): The vulnerability allows an authenticated remote attacker to list arbitrary folders in all paths of the system under the context of the appl (CVSS 6.5)
- [CVE-2023-48248](https://cve.now/CVE-2023-48248.md): The vulnerability allows an authenticated remote attacker to upload a malicious file to the SD card containing arbitrary client-side script (CVSS 5.5)
- [CVE-2023-48247](https://cve.now/CVE-2023-48247.md): The vulnerability allows an unauthenticated remote attacker to read arbitrary files under the context of the application OS user (“root”) vi (CVSS 5.3)
- [CVE-2023-48246](https://cve.now/CVE-2023-48246.md): The vulnerability allows a remote attacker to download arbitrary files in all paths of the system under the context of the application OS us (CVSS 6.5)
- [CVE-2023-48245](https://cve.now/CVE-2023-48245.md): The vulnerability allows an unauthenticated remote attacker to upload arbitrary files under the context of the application OS user (“root”) (CVSS 6.5)
- [CVE-2023-48244](https://cve.now/CVE-2023-48244.md): The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted U (CVSS 5.3)
- [CVE-2023-48243](https://cve.now/CVE-2023-48243.md): The vulnerability allows a remote attacker to upload arbitrary files in all paths of the system under the context of the application OS user (CVSS 8.1)
- [CVE-2023-48242](https://cve.now/CVE-2023-48242.md): The vulnerability allows an authenticated remote attacker to download arbitrary files in all paths of the system under the context of the ap (CVSS 6.5)
- [CVE-2023-45220](https://cve.now/CVE-2023-45220.md): The Android Client application, when enrolled with the define method 1(the user manually inserts the server ip address), use HTTP protocol t (CVSS 8.8)
- [CVE-2023-41372](https://cve.now/CVE-2023-41372.md): The vulnerability allows an unprivileged (untrusted) third- party application to arbitrary modify the server settings of the Android Client (CVSS 7.8)
- [CVE-2023-41960](https://cve.now/CVE-2023-41960.md): The vulnerability allows an unprivileged(untrusted) third-party application to interact with a content-provider unsafely exposed by the Andr (CVSS 7.1)
- [CVE-2023-41255](https://cve.now/CVE-2023-41255.md): The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on the device itself abu (CVSS 8.8)
- [CVE-2023-43488](https://cve.now/CVE-2023-43488.md): The vulnerability allows a low privileged (untrusted) application to modify a critical system property that should be denied, in order to e (CVSS 7.9)
- [CVE-2023-45844](https://cve.now/CVE-2023-45844.md): The vulnerability allows a low privileged user that have access to the device when locked in Kiosk mode to install an arbitrary Android appl (CVSS 7.3)
- [CVE-2021-23857](https://cve.now/CVE-2021-23857.md): Login with hash (CVSS 10.0)
- [CVE-2021-23855](https://cve.now/CVE-2021-23855.md): Information disclosure (CVSS 8.6)
- [CVE-2021-23858](https://cve.now/CVE-2021-23858.md): Information disclosure (CVSS 8.6)
- [CVE-2021-23856](https://cve.now/CVE-2021-23856.md): Reflected Cross-Site-Scripting (CVSS 10.0)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/rexroth
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.