HIGH🇵🇱 Wersja polska

CVE-2021-23858

CVSS 8.6v3.1pub. 2021-10-04upd. 2024-11-21

Information disclosure: The main configuration, including users and their hashed passwords, is exposed by an unprotected web server resource and can be accessed without authentication. Additionally, device details are exposed which include the serial number and the firmware version by another unprotected web server resource.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

  • Bosch Indracontrol Xlc

    HW
    Bosch
    all versions

  • Bosch Indracontrol Xlc Firmware

    OS
    Bosch
    ≤ 12

  • Bosch Rexroth Indramotion Mlc L20

    HW
    Bosch
    all versions

  • Bosch Rexroth Indramotion Mlc L20 Firmware

    OS
    Bosch
    ≤ 12

  • Bosch Rexroth Indramotion Mlc L25

    HW
    Bosch
    all versions

  • Bosch Rexroth Indramotion Mlc L25 Firmware

    OS
    Bosch
    ≤ 12

  • Bosch Rexroth Indramotion Mlc L40

    HW
    Bosch
    all versions

  • Bosch Rexroth Indramotion Mlc L40 Firmware

    OS
    Bosch
    ≤ 12

  • Bosch Rexroth Indramotion Mlc L45

    HW
    Bosch
    all versions

  • Bosch Rexroth Indramotion Mlc L45 Firmware

    OS
    Bosch
    ≤ 12

  • Bosch Rexroth Indramotion Mlc L65

    HW
    Bosch
    all versions

  • Bosch Rexroth Indramotion Mlc L65 Firmware

    OS
    Bosch
    ≤ 12

  • Bosch Rexroth Indramotion Mlc L75

    HW
    Bosch
    all versions

  • Bosch Rexroth Indramotion Mlc L75 Firmware

    OS
    Bosch
    ≤ 12

  • Bosch Rexroth Indramotion Mlc L85

    HW
    Bosch
    all versions

  • Bosch Rexroth Indramotion Mlc L85 Firmware

    OS
    Bosch
    ≤ 12

  • Bosch Rexroth Indramotion Mlc Xm21

    HW
    Bosch
    all versions

  • Bosch Rexroth Indramotion Mlc Xm21 Firmware

    OS
    Bosch
    ≤ 12

  • Bosch Rexroth Indramotion Mlc Xm22

    HW
    Bosch
    all versions

  • Bosch Rexroth Indramotion Mlc Xm22 Firmware

    OS
    Bosch
    ≤ 12

  • Bosch Rexroth Indramotion Mlc Xm41

    HW
    Bosch
    all versions

  • Bosch Rexroth Indramotion Mlc Xm41 Firmware

    OS
    Bosch
    ≤ 12

  • Bosch Rexroth Indramotion Mlc Xm42

    HW
    Bosch
    all versions

  • Bosch Rexroth Indramotion Mlc Xm42 Firmware

    OS
    Bosch
    ≤ 12
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2021-23856CRITICAL10.0PL ✓same product

Reflected XSS w serwerze web Bosch Rexroth Indramotion MLC L20/L40

CVE-2021-23857CRITICAL10.0PL ✓same product

Auth Bypass poprzez logowanie hashem hasła w Bosch Rexroth IndraMotion MLC

CVE-2022-36301CRITICAL9.8PL ✓same vendor

Bosch BF-OS: brak wymuszania silnych haseł umożliwia brute-force

CVE-2021-23859CRITICAL9.1PL ✓same vendor

Bosch BVMS/VRM — nieuwierzytelniona awaria usługi i obejście autoryzacji

CVE-2021-23847CRITICAL9.8PL ✓same vendor

Pominięcie uwierzytelniania w kamerach IP Bosch CPP6/CPP7