Description
Login with hash: The login routine allows the client to log in to the system not by using the password, but by using the hash of the password. Combined with CVE-2021-23858, this allows an attacker to subsequently login to the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Rexroth | IndraMotion MLC L25, L45, L65, L75, L85, XM21, XM22, XM41 and XM42 IndraMotion XLC | 12 VRS – < unspecified | unspecified |
| Rexroth | IndraMotion MLC L20, L40 | 12 VRS – < unspecified | unspecified |