Vendor

Bosch Rexroth

26 known vulnerabilities.

Products

ctrlX OS - Device Admin 12 IndraWorks 4 ctrlX OS - Solutions 3 ctrlX HMI Web Panel - WR21 (WR2107) 3 ctrlX HMI Web Panel - WR21 (WR2110) 3 ctrlX HMI Web Panel - WR21 (WR2115) 3 ctrlX OS - Setup 3 IndraDrive FWA-INDRV*-MP* 1 UA.Testclient 1 AG IndraDrive FWA-INDRV-MP 0 Solutions 0 Device Admin 0 BLADEcontrol-WebVIS 0

All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

High 7.8

CVE-2025-60038

A vulnerability has been identified in Rexroth IndraWorks. This flaw allows an attacker to execute arbitrary code on th…

Bosch Rexroth IndraWorks

Feb 18, 2026
High 7.8

CVE-2025-60037

A vulnerability has been identified in Rexroth IndraWorks. This flaw allows an attacker to execute arbitrary code on th…

Bosch Rexroth IndraWorks

Feb 18, 2026
High 7.8

CVE-2025-60036

A vulnerability has been identified in the UA.Testclient utility, which is included in Rexroth IndraWorks. All versions…

Bosch Rexroth IndraWorks UA.Testclient

Feb 18, 2026
High 7.8

CVE-2025-60035

A vulnerability has been identified in the OPC.Testclient utility, which is included in Rexroth IndraWorks. All version…

Bosch Rexroth IndraWorks

Feb 18, 2026
High 7.1

CVE-2025-48862

Ambiguous wording in the web interface of the ctrlX OS setup mechanism could lead the user to believe that the backup f…

Bosch Rexroth ctrlX OS - Setup

Aug 14, 2025
High 8.0

CVE-2025-48860

A vulnerability in the web application of the ctrlX OS setup mechanism facilitated an authenticated (low privileged) at…

Bosch Rexroth ctrlX OS - Setup

Aug 14, 2025
High 8.8

CVE-2025-24351

A vulnerability in the “Remote Logging” functionality of the web application of ctrlX OS allows a remote authenticated …

Bosch Rexroth ctrlX OS - Device Admin

Apr 30, 2025
High 7.1

CVE-2025-24350

A vulnerability in the “Certificates and Keys” functionality of the web application of ctrlX OS allows a remote authent…

Bosch Rexroth ctrlX OS - Device Admin

Apr 30, 2025
High 7.1

CVE-2025-24349

A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authentica…

Bosch Rexroth ctrlX OS - Device Admin

Apr 30, 2025
High 7.5

CVE-2025-24346

A vulnerability in the “Proxy” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivi…

Bosch Rexroth ctrlX OS - Device Admin

Apr 30, 2025
High 7.1

CVE-2025-24338

A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticate…

Bosch Rexroth ctrlX OS - Solutions

Apr 30, 2025
High 7.5

CVE-2024-48989

A vulnerability in the PROFINET stack implementation of the IndraDrive (all versions) of Bosch Rexroth allows an attack…

Bosch Rexroth IndraDrive FWA-INDRV*-MP*

Nov 13, 2024
High 8.8

CVE-2023-46102

The Android Client application, when enrolled to the AppHub server, connects to an MQTT broker to exchange messages and…

Bosch Rexroth ctrlX HMI Web Panel - WR21 (WR2107) ctrlX HMI Web Panel - WR21 (WR2115) ctrlX HMI Web Panel - WR21 (WR2110)

Oct 25, 2023
High 8.8

CVE-2023-45851

The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any ser…

Bosch Rexroth ctrlX HMI Web Panel - WR21 (WR2107) ctrlX HMI Web Panel - WR21 (WR2115) ctrlX HMI Web Panel - WR21 (WR2110)

Oct 25, 2023
High 8.3

CVE-2023-45321

The Android Client application, when enrolled with the define method 1 (the user manually inserts the server ip address…

Bosch Rexroth ctrlX HMI Web Panel - WR21 (WR2110) ctrlX HMI Web Panel - WR21 (WR2107) ctrlX HMI Web Panel - WR21 (WR2115)

Oct 25, 2023