Skip to content
OpenAdvisories
High · 7.1 CVE-2025-48862 EUVD-2025-24678GHSA-8q42-fc7h-p6qc

Ambiguous wording in the web interface of the ctrlX OS setup mechanism could lead the user to believe that the backup file is encrypted whe…

Published Aug 14, 2025 · Updated Aug 14, 2025 · Assigned by bosch

Description

Ambiguous wording in the web interface of the ctrlX OS setup mechanism could lead the user to believe that the backup file is encrypted when a password is set. However, only the private key - if available in the backup - is encrypted, while the backup file itself remains unencrypted.

Affected products

VendorProductAffectedFixed
Bosch Rexroth ctrlX OS - Setup 1.20.0 – ≤ 1.20.1, 2.6.0 – ≤ 2.6.1, 3.6.0 – ≤ 3.6.2 —

References