HIGH🇬🇧 English

CVE-2021-23858

CVSS 8.6v3.1pub. 2021-10-04upd. 2024-11-21

Information disclosure: The main configuration, including users and their hashed passwords, is exposed by an unprotected web server resource and can be accessed without authentication. Additionally, device details are exposed which include the serial number and the firmware version by another unprotected web server resource.

oryginał EN

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Bosch Indracontrol Xlc
HW
Bosch
wszystkie wersje
Bosch Indracontrol Xlc Firmware
OS
Bosch
≤ 12
Bosch Rexroth Indramotion Mlc L20
HW
Bosch
wszystkie wersje
Bosch Rexroth Indramotion Mlc L20 Firmware
OS
Bosch
≤ 12
Bosch Rexroth Indramotion Mlc L25
HW
Bosch
wszystkie wersje
Bosch Rexroth Indramotion Mlc L25 Firmware
OS
Bosch
≤ 12
Bosch Rexroth Indramotion Mlc L40
HW
Bosch
wszystkie wersje
Bosch Rexroth Indramotion Mlc L40 Firmware
OS
Bosch
≤ 12
Bosch Rexroth Indramotion Mlc L45
HW
Bosch
wszystkie wersje
Bosch Rexroth Indramotion Mlc L45 Firmware
OS
Bosch
≤ 12
Bosch Rexroth Indramotion Mlc L65
HW
Bosch
wszystkie wersje
Bosch Rexroth Indramotion Mlc L65 Firmware
OS
Bosch
≤ 12
Bosch Rexroth Indramotion Mlc L75
HW
Bosch
wszystkie wersje
Bosch Rexroth Indramotion Mlc L75 Firmware
OS
Bosch
≤ 12
Bosch Rexroth Indramotion Mlc L85
HW
Bosch
wszystkie wersje
Bosch Rexroth Indramotion Mlc L85 Firmware
OS
Bosch
≤ 12
Bosch Rexroth Indramotion Mlc Xm21
HW
Bosch
wszystkie wersje
Bosch Rexroth Indramotion Mlc Xm21 Firmware
OS
Bosch
≤ 12
Bosch Rexroth Indramotion Mlc Xm22
HW
Bosch
wszystkie wersje
Bosch Rexroth Indramotion Mlc Xm22 Firmware
OS
Bosch
≤ 12
Bosch Rexroth Indramotion Mlc Xm41
HW
Bosch
wszystkie wersje
Bosch Rexroth Indramotion Mlc Xm41 Firmware
OS
Bosch
≤ 12
Bosch Rexroth Indramotion Mlc Xm42
HW
Bosch
wszystkie wersje
Bosch Rexroth Indramotion Mlc Xm42 Firmware
OS
Bosch
≤ 12

🔵

ZWERYFIKUJ U PRODUCENTA

Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.

CWE

Referencje

psirt.bosch.com/security-advisories/bosch-sa-741752.htm…

psirt.bosch.com/security-advisories/bosch-sa-741752.htm…

Powiązane podatności

CVE-2021-23856CRITICAL10.0PL ✓ten sam produkt

Reflected XSS w serwerze web Bosch Rexroth Indramotion MLC L20/L40

CVE-2021-23857CRITICAL10.0PL ✓ten sam produkt

Auth Bypass poprzez logowanie hashem hasła w Bosch Rexroth IndraMotion MLC

CVE-2022-36301CRITICAL9.8PL ✓ten sam vendor

Bosch BF-OS: brak wymuszania silnych haseł umożliwia brute-force

CVE-2021-23859CRITICAL9.1PL ✓ten sam vendor

Bosch BVMS/VRM — nieuwierzytelniona awaria usługi i obejście autoryzacji

CVE-2021-23847CRITICAL9.8PL ✓ten sam vendor

Pominięcie uwierzytelniania w kamerach IP Bosch CPP6/CPP7