Skip to content
OpenAdvisories
High · 7.1 CVE-2023-41960 EUVD-2023-46419GHSA-wgxg-xqwg-w2vw

The vulnerability allows an unprivileged(untrusted) third-party application to interact with a content-provider unsafely exposed by the And…

Published Oct 25, 2023 · Updated Sep 12, 2024 · Assigned by bosch

Vendor: Rexroth Product: ctrlX HMI Web Panel - WR21 (WR2107) Product: ctrlX HMI Web Panel - WR21 (WR2110) Product: ctrlX HMI Web Panel - WR21 (WR2115)

Description

The vulnerability allows an unprivileged(untrusted) third-party application to interact with a content-provider unsafely exposed by the Android Agent application, potentially modifying sensitive settings of the Android Client application itself.

Affected products

VendorProductAffectedFixed
Rexroth ctrlX HMI Web Panel - WR21 (WR2107) all —
Rexroth ctrlX HMI Web Panel - WR21 (WR2110) all —
Rexroth ctrlX HMI Web Panel - WR21 (WR2115) all —

References