Skip to content
OpenAdvisories
High · 8.6 CVE-2021-23855 EUVD-2021-10781GHSA-265m-mr24-fcwv

Information disclosure

Published Oct 4, 2021 · Updated Aug 3, 2024 · Assigned by bosch

Description

The user and password data base is exposed by an unprotected web server resource. Passwords are hashed with a weak hashing algorithm and therefore allow an attacker to determine the password by using rainbow tables.

Affected products

VendorProductAffectedFixed
Rexroth IndraMotion MLC IndraMotion XLC All —

References