CyberSec.Space Logo
Back to CVE Browser

CVE-2021-23857

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1220%
EPSS Percentile10.24th
PublishedOct 4, 2021
Last ModifiedNov 21, 2024

Vulnerability Description

Login with hash: The login routine allows the client to log in to the system not by using the password, but by using the hash of the password. Combined with CVE-2021-23858, this allows an attacker to subsequently login to the system.

Affected Platforms (CPE)

💻
Bosch

Rexroth Indramotion Mlc L20 Firmware

<= 12
💻
Bosch

Rexroth Indramotion Mlc L40 Firmware

<= 12
💻
Bosch

Rexroth Indramotion Mlc L25 Firmware

<= 12
💻
Bosch

Rexroth Indramotion Mlc L45 Firmware

<= 12
💻
Bosch

Rexroth Indramotion Mlc L65 Firmware

<= 12
💻
Bosch

Rexroth Indramotion Mlc L75 Firmware

<= 12
💻
Bosch

Rexroth Indramotion Mlc L85 Firmware

<= 12
💻
Bosch

Rexroth Indramotion Mlc Xm22 Firmware

<= 12
💻
Bosch

Rexroth Indramotion Mlc Xm21 Firmware

<= 12
💻
Bosch

Rexroth Indramotion Mlc Xm41 Firmware

<= 12
💻
Bosch

Rexroth Indramotion Mlc Xm42 Firmware

<= 12
💻
Bosch

Rexroth Indramotion Xlc Firmware

<= 12

References & Advisories

🔗 https://psirt.bosch.com/security-advisories/bosch-sa-741752.html
🔗 https://psirt.bosch.com/security-advisories/bosch-sa-741752.html

Related Vulnerabilities

CVE-2021-2947510.0

HedgeDoc (formerly known as CodiMD) is an open-source collaborative markdown editor. An attacker is able to receive arbitrary file...

CVE-2021-2732910.0

Friendica 2021.01 allows SSRF via parse_url?binurl= for DNS lookups or HTTP requests to arbitrary domain names.

CVE-2021-3467910.0

Thycotic Password Reset Server before 5.3.0 allows credential disclosure.

CVE-2021-021110.0

An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon ...