Vendor

Rexroth

35 known vulnerabilities.

Products

Nexo cordless nutrunner NXA015S-36V (0608842001) 25 Nexo cordless nutrunner NXA030S-36V (0608842002) 25 Nexo cordless nutrunner NXA050S-36V (0608842003) 25 Nexo cordless nutrunner NXP012QD-36V (0608842005) 25 Nexo cordless nutrunner NXA015S-36V-B (0608842006) 25 Nexo cordless nutrunner NXA030S-36V-B (0608842007) 25 Nexo cordless nutrunner NXA050S-36V-B (0608842008) 25 Nexo cordless nutrunner NXP012QD-36V-B (0608842010) 25 Nexo cordless nutrunner NXA011S-36V (0608842011) 25 Nexo cordless nutrunner NXA011S-36V-B (0608842012) 25 Nexo cordless nutrunner NXA065S-36V (0608842013) 25 Nexo cordless nutrunner NXA065S-36V-B (0608842014) 25 Nexo cordless nutrunner NXV012T-36V (0608842015) 25 Nexo cordless nutrunner NXV012T-36V-B (0608842016) 25 Nexo special cordless nutrunner (0608PE2272) 25 Nexo special cordless nutrunner (0608PE2301) 25 Nexo special cordless nutrunner (0608PE2514) 25 Nexo special cordless nutrunner (0608PE2515) 25 Nexo special cordless nutrunner (0608PE2666) 25 Nexo special cordless nutrunner (0608PE2673) 25 ctrlX HMI Web Panel - WR21 (WR2107) 6 ctrlX HMI Web Panel - WR21 (WR2110) 6 ctrlX HMI Web Panel - WR21 (WR2115) 6 IndraMotion MLC L20, L40 3 IndraMotion MLC L25, L45, L65, L75, L85, XM21, XM22, XM41 and XM42 IndraControl XLC 1 IndraMotion MLC IndraMotion XLC 1 IndraMotion MLC L25, L45, L65, L75, L85, XM21, XM22, XM41 and XM42 IndraMotion XLC 1

All Critical High Medium Low Exploited only Public exploit

19 results · Clear filters · Feed

High 8.1

CVE-2023-48266

The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, o…

Rexroth Nexo special cordless nutrunner (0608PE2673) Nexo cordless nutrunner NXP012QD-36V (0608842005) Nexo cordless nutrunner NXV012T-36V (0608842015)

Jan 10, 2024
High 8.1

CVE-2023-48265

The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, o…

Rexroth Nexo cordless nutrunner NXV012T-36V-B (0608842016) Nexo cordless nutrunner NXA050S-36V-B (0608842008) Nexo special cordless nutrunner (0608PE2301)

Jan 10, 2024
High 8.1

CVE-2023-48264

The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, o…

Rexroth Nexo special cordless nutrunner (0608PE2515) Nexo cordless nutrunner NXA030S-36V (0608842002) Nexo cordless nutrunner NXA065S-36V (0608842013)

Jan 10, 2024
High 8.1

CVE-2023-48263

The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, o…

Rexroth Nexo cordless nutrunner NXA050S-36V (0608842003) Nexo special cordless nutrunner (0608PE2666) Nexo cordless nutrunner NXA065S-36V-B (0608842014)

Jan 10, 2024
High 8.1

CVE-2023-48262

The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, o…

Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) Nexo special cordless nutrunner (0608PE2514) Nexo cordless nutrunner NXA011S-36V-B (0608842012)

Jan 10, 2024
High 7.8

CVE-2023-48257

The vulnerability allows a remote attacker to access sensitive data inside exported packages or obtain up to Remote Cod…

Rexroth Nexo cordless nutrunner NXA050S-36V-B (0608842008) Nexo special cordless nutrunner (0608PE2301) Nexo cordless nutrunner NXA011S-36V (0608842011)

Jan 10, 2024
High 8.8

CVE-2023-48253

The vulnerability allows a remote authenticated attacker to read or update arbitrary content of the authentication data…

Rexroth Nexo cordless nutrunner NXV012T-36V (0608842015) Nexo cordless nutrunner NXA030S-36V-B (0608842007) Nexo special cordless nutrunner (0608PE2272)

Jan 10, 2024
High 8.8

CVE-2023-48252

The vulnerability allows an authenticated remote attacker to perform actions exceeding their authorized access via craf…

Rexroth Nexo special cordless nutrunner (0608PE2272) Nexo cordless nutrunner NXP012QD-36V-B (0608842010) Nexo cordless nutrunner NXA015S-36V (0608842001)

Jan 10, 2024
High 8.1

CVE-2023-48251

The vulnerability allows a remote attacker to authenticate to the SSH service with root privileges through a hidden har…

Rexroth Nexo cordless nutrunner NXA011S-36V (0608842011) Nexo cordless nutrunner NXA030S-36V (0608842002) Nexo special cordless nutrunner (0608PE2515)

Jan 10, 2024
High 8.1

CVE-2023-48250

The vulnerability allows a remote attacker to authenticate to the web application with high privileges through multiple…

Rexroth Nexo cordless nutrunner NXA065S-36V-B (0608842014) Nexo cordless nutrunner NXA015S-36V-B (0608842006) Nexo cordless nutrunner NXV012T-36V-B (0608842016)

Jan 10, 2024
High 8.1

CVE-2023-48243

The vulnerability allows a remote attacker to upload arbitrary files in all paths of the system under the context of th…

Rexroth Nexo cordless nutrunner NXP012QD-36V-B (0608842010) Nexo special cordless nutrunner (0608PE2514) Nexo cordless nutrunner NXA015S-36V (0608842001)

Jan 10, 2024
High 8.8

CVE-2023-45220

The Android Client application, when enrolled with the define method 1(the user manually inserts the server ip address)…

Rexroth ctrlX HMI Web Panel - WR21 (WR2110) ctrlX HMI Web Panel - WR21 (WR2107) ctrlX HMI Web Panel - WR21 (WR2115)

Oct 25, 2023
High 7.8

CVE-2023-41372

The vulnerability allows an unprivileged (untrusted) third- party application to arbitrary modify the server settings o…

Rexroth ctrlX HMI Web Panel - WR21 (WR2110) ctrlX HMI Web Panel - WR21 (WR2107) ctrlX HMI Web Panel - WR21 (WR2115)

Oct 25, 2023
High 7.1

CVE-2023-41960

The vulnerability allows an unprivileged(untrusted) third-party application to interact with a content-provider unsafel…

Rexroth ctrlX HMI Web Panel - WR21 (WR2107) ctrlX HMI Web Panel - WR21 (WR2115) ctrlX HMI Web Panel - WR21 (WR2110)

Oct 25, 2023
High 8.8

CVE-2023-41255

The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on …

Rexroth ctrlX HMI Web Panel - WR21 (WR2107) ctrlX HMI Web Panel - WR21 (WR2115) ctrlX HMI Web Panel - WR21 (WR2110)

Oct 25, 2023
High 7.9

CVE-2023-43488

The vulnerability allows a low privileged (untrusted) application to modify a critical system property that should be d…

Rexroth ctrlX HMI Web Panel - WR21 (WR2110) ctrlX HMI Web Panel - WR21 (WR2107) ctrlX HMI Web Panel - WR21 (WR2115)

Oct 25, 2023
High 7.3

CVE-2023-45844

The vulnerability allows a low privileged user that have access to the device when locked in Kiosk mode to install an a…

Rexroth ctrlX HMI Web Panel - WR21 (WR2110) ctrlX HMI Web Panel - WR21 (WR2107) ctrlX HMI Web Panel - WR21 (WR2115)

Oct 25, 2023
High 8.6

CVE-2021-23855

Information disclosure

The user and password data base is exposed by an unprotected web server resource. Passwords are hashed with a weak hashing algorithm and therefore allow an attacker to determine the password by using rainbow tables.

Rexroth IndraMotion MLC IndraMotion XLC

Oct 4, 2021
High 8.6

CVE-2021-23858

Information disclosure

Information disclosure: The main configuration, including users and their hashed passwords, is exposed by an unprotected web server resource and can be accessed without authentication. Additionally, device details are exposed which include the serial number a…

Rexroth IndraMotion MLC L20, L40 IndraMotion MLC L25, L45, L65, L75, L85, XM21, XM22, XM41 and XM42 IndraControl XLC

Oct 4, 2021