Vendor
Rexroth
35 known vulnerabilities.
Rexroth at a glance
- Last 12 months
- 0
- Critical · all time
- 2
- Exploited · all time
- 0
- Public exploit · all time
- 0
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
Products
Nexo cordless nutrunner NXA015S-36V (0608842001) 25
Nexo cordless nutrunner NXA030S-36V (0608842002) 25
Nexo cordless nutrunner NXA050S-36V (0608842003) 25
Nexo cordless nutrunner NXP012QD-36V (0608842005) 25
Nexo cordless nutrunner NXA015S-36V-B (0608842006) 25
Nexo cordless nutrunner NXA030S-36V-B (0608842007) 25
Nexo cordless nutrunner NXA050S-36V-B (0608842008) 25
Nexo cordless nutrunner NXP012QD-36V-B (0608842010) 25
Nexo cordless nutrunner NXA011S-36V (0608842011) 25
Nexo cordless nutrunner NXA011S-36V-B (0608842012) 25
Nexo cordless nutrunner NXA065S-36V (0608842013) 25
Nexo cordless nutrunner NXA065S-36V-B (0608842014) 25
Nexo cordless nutrunner NXV012T-36V (0608842015) 25
Nexo cordless nutrunner NXV012T-36V-B (0608842016) 25
Nexo special cordless nutrunner (0608PE2272) 25
Nexo special cordless nutrunner (0608PE2301) 25
Nexo special cordless nutrunner (0608PE2514) 25
Nexo special cordless nutrunner (0608PE2515) 25
Nexo special cordless nutrunner (0608PE2666) 25
Nexo special cordless nutrunner (0608PE2673) 25
ctrlX HMI Web Panel - WR21 (WR2107) 6
ctrlX HMI Web Panel - WR21 (WR2110) 6
ctrlX HMI Web Panel - WR21 (WR2115) 6
IndraMotion MLC L20, L40 3
IndraMotion MLC L25, L45, L65, L75, L85, XM21, XM22, XM41 and XM42 IndraControl XLC 1
IndraMotion MLC IndraMotion XLC 1
IndraMotion MLC L25, L45, L65, L75, L85, XM21, XM22, XM41 and XM42 IndraMotion XLC 1
35 results · Feed
-
High 8.1
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, o…
-
High 8.1
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, o…
-
High 8.1
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, o…
-
High 8.1
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, o…
-
High 8.1
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, o…
-
Medium 5.3
The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a craf…
-
Medium 5.3
The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a craf…
-
Medium 5.3
The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a craf…
-
Medium 5.5
The vulnerability allows a remote attacker to delete arbitrary files on the file system via a crafted URL or HTTP reque…
-
High 7.8
The vulnerability allows a remote attacker to access sensitive data inside exported packages or obtain up to Remote Cod…
-
Medium 5.3
The vulnerability allows a remote attacker to inject arbitrary HTTP response headers or manipulate HTTP response bodies…
-
Medium 6.3
The vulnerability allows an unauthenticated remote attacker to send malicious network requests containing arbitrary cli…
-
Medium 5.3
The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s se…
-
High 8.8
The vulnerability allows a remote authenticated attacker to read or update arbitrary content of the authentication data…
-
High 8.8
The vulnerability allows an authenticated remote attacker to perform actions exceeding their authorized access via craf…
-
High 8.1
The vulnerability allows a remote attacker to authenticate to the SSH service with root privileges through a hidden har…
-
High 8.1
The vulnerability allows a remote attacker to authenticate to the web application with high privileges through multiple…
-
Medium 6.5
The vulnerability allows an authenticated remote attacker to list arbitrary folders in all paths of the system under th…
-
Medium 5.5
The vulnerability allows an authenticated remote attacker to upload a malicious file to the SD card containing arbitrar…
-
Medium 5.3
The vulnerability allows an unauthenticated remote attacker to read arbitrary files under the context of the applicatio…
-
Medium 6.5
The vulnerability allows a remote attacker to download arbitrary files in all paths of the system under the context of …
-
Medium 6.5
The vulnerability allows an unauthenticated remote attacker to upload arbitrary files under the context of the applicat…
-
Medium 5.3
The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s se…
-
High 8.1
The vulnerability allows a remote attacker to upload arbitrary files in all paths of the system under the context of th…
-
Medium 6.5
The vulnerability allows an authenticated remote attacker to download arbitrary files in all paths of the system under …
-
High 8.8
The Android Client application, when enrolled with the define method 1(the user manually inserts the server ip address)…
-
High 7.8
The vulnerability allows an unprivileged (untrusted) third- party application to arbitrary modify the server settings o…
-
High 7.1
The vulnerability allows an unprivileged(untrusted) third-party application to interact with a content-provider unsafel…
-
High 8.8
The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on …
-
High 7.9
The vulnerability allows a low privileged (untrusted) application to modify a critical system property that should be d…
-
High 7.3
The vulnerability allows a low privileged user that have access to the device when locked in Kiosk mode to install an a…
-
Critical 10.0
Login with hash
Login with hash: The login routine allows the client to log in to the system not by using the password, but by using the hash of the password. Combined with CVE-2021-23858, this allows an attacker to subsequently login to the system.
-
High 8.6
Information disclosure
The user and password data base is exposed by an unprotected web server resource. Passwords are hashed with a weak hashing algorithm and therefore allow an attacker to determine the password by using rainbow tables.
-
High 8.6
Information disclosure
Information disclosure: The main configuration, including users and their hashed passwords, is exposed by an unprotected web server resource and can be accessed without authentication. Additionally, device details are exposed which include the serial number a…
-
Critical 10.0
Reflected Cross-Site-Scripting
The web server is vulnerable to reflected XSS and therefore an attacker might be able to execute scripts on a client’s computer by sending the client a manipulated URL.