cveboard RSS feed

CVE-2023-45321

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2023
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

The Android Client application, when enrolled with the define method 1 (the user manually inserts the server ip address), use HTTP protocol to retrieve sensitive information (ip address and credentials to connect to a remote MQTT broker entity) instead of HTTPS and this feature is not configurable by the user. Due to the lack of encryption of HTTP,this issue allows an attacker placed in the same subnet network of the HMI device to intercept username and password necessary to authenticate to the MQTT server responsible to implement the remote management protocol.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

ctrlX HMI Web Panel - WR21 (WR2107)

Vendor
Bosch Rexroth AG
Product
ctrlX HMI Web Panel - WR21 (WR2107)
Platforms
Unknown
Default status
Unknown
ctrlX HMI Web Panel - WR21 (WR2107) · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
allaffectedUnavailableUnavailableUnavailableNone listed

ctrlX HMI Web Panel - WR21 (WR2110)

Vendor
Bosch Rexroth AG
Product
ctrlX HMI Web Panel - WR21 (WR2110)
Platforms
Unknown
Default status
Unknown
ctrlX HMI Web Panel - WR21 (WR2110) · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
allaffectedUnavailableUnavailableUnavailableNone listed

ctrlX HMI Web Panel - WR21 (WR2115)

Vendor
Bosch Rexroth AG
Product
ctrlX HMI Web Panel - WR21 (WR2115)
Platforms
Unknown
Default status
Unknown
ctrlX HMI Web Panel - WR21 (WR2115) · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
allaffectedUnavailableUnavailableUnavailableNone listed