Vendor
Bosch Rexroth
26 known vulnerabilities.
Bosch Rexroth at a glance
- Last 12 months
- 4
- Critical · all time
- 0
- Exploited · all time
- 0
- Public exploit · all time
- 0
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 4 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 3 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 15 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Products
ctrlX OS - Device Admin 12
IndraWorks 4
ctrlX OS - Solutions 3
ctrlX HMI Web Panel - WR21 (WR2107) 3
ctrlX HMI Web Panel - WR21 (WR2110) 3
ctrlX HMI Web Panel - WR21 (WR2115) 3
ctrlX OS - Setup 3
IndraDrive FWA-INDRV*-MP* 1
UA.Testclient 1
AG IndraDrive FWA-INDRV-MP 0
Solutions 0
Device Admin 0
BLADEcontrol-WebVIS 0
Latest advisories
-
High max 8.8VDE-2025-040 15 CVEs
WAGO: Vulnerabilities in ctrlX OS app
The base ctrlX OS apps Device Admin and Solutions contain multiple vulnerabilities. In a worst case scenario, a remote authenticated (low-privileged) attacker might be able to execute arbitrary OS commands running with higher privileges.
-
Mediumfirst Apr 8, 2016
-
High max 7.5ICSA-24-312-03 1 CVE
Bosch Rexroth IndraDrive
Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service, rendering the device unresponsive by sending arbitrary UDP messages.
26 results · Feed
-
High 7.8
A vulnerability has been identified in Rexroth IndraWorks. This flaw allows an attacker to execute arbitrary code on th…
-
High 7.8
A vulnerability has been identified in Rexroth IndraWorks. This flaw allows an attacker to execute arbitrary code on th…
-
High 7.8
A vulnerability has been identified in the UA.Testclient utility, which is included in Rexroth IndraWorks. All versions…
-
High 7.8
A vulnerability has been identified in the OPC.Testclient utility, which is included in Rexroth IndraWorks. All version…
-
High 7.1
Ambiguous wording in the web interface of the ctrlX OS setup mechanism could lead the user to believe that the backup f…
-
Medium 5.3
A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote, unauthenticated attacker to …
-
High 8.0
A vulnerability in the web application of the ctrlX OS setup mechanism facilitated an authenticated (low privileged) at…
-
Medium 6.5
A vulnerability in the “Backup & Restore” functionality of the web application of ctrlX OS allows a remote authenticate…
-
High 8.8
A vulnerability in the “Remote Logging” functionality of the web application of ctrlX OS allows a remote authenticated …
-
High 7.1
A vulnerability in the “Certificates and Keys” functionality of the web application of ctrlX OS allows a remote authent…
-
High 7.1
A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authentica…
-
Medium 5.4
A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authentica…
-
Medium 6.5
A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authentica…
-
High 7.5
A vulnerability in the “Proxy” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivi…
-
Medium 6.3
A vulnerability in the “Hosts” functionality of the web application of ctrlX OS allows a remote authenticated (low-priv…
-
Medium 6.3
A vulnerability in the error notification messages of the web application of ctrlX OS allows a remote unauthenticated a…
-
Medium 5.4
A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticate…
-
Medium 5.3
A vulnerability in the login functionality of the web application of ctrlX OS allows a remote unauthenticated attacker …
-
Medium 6.5
A vulnerability in the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to induce a …
-
Medium 6.5
A vulnerability in the users configuration file of ctrlX OS may allow a remote authenticated (low-privileged) attacker …
-
Medium 5.0
A vulnerability in the web application of ctrlX OS allows a remote unauthenticated attacker to conduct various attacks …
-
High 7.1
A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticate…
-
High 7.5
A vulnerability in the PROFINET stack implementation of the IndraDrive (all versions) of Bosch Rexroth allows an attack…
-
High 8.8
The Android Client application, when enrolled to the AppHub server, connects to an MQTT broker to exchange messages and…
-
High 8.8
The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any ser…
-
High 8.3
The Android Client application, when enrolled with the define method 1 (the user manually inserts the server ip address…