CyberSec.Space Logo
CVEブラウザに戻る

CVE-2021-23857

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1220%
EPSS Percentile10.24th
Published2021年10月4日
Last Modified2024年11月21日

Vulnerability Description

Login with hash: The login routine allows the client to log in to the system not by using the password, but by using the hash of the password. Combined with CVE-2021-23858, this allows an attacker to subsequently login to the system.

Affected Platforms (CPE)

💻
Bosch

Rexroth Indramotion Mlc L20 Firmware

<= 12
💻
Bosch

Rexroth Indramotion Mlc L40 Firmware

<= 12
💻
Bosch

Rexroth Indramotion Mlc L25 Firmware

<= 12
💻
Bosch

Rexroth Indramotion Mlc L45 Firmware

<= 12
💻
Bosch

Rexroth Indramotion Mlc L65 Firmware

<= 12
💻
Bosch

Rexroth Indramotion Mlc L75 Firmware

<= 12
💻
Bosch

Rexroth Indramotion Mlc L85 Firmware

<= 12
💻
Bosch

Rexroth Indramotion Mlc Xm22 Firmware

<= 12
💻
Bosch

Rexroth Indramotion Mlc Xm21 Firmware

<= 12
💻
Bosch

Rexroth Indramotion Mlc Xm41 Firmware

<= 12
💻
Bosch

Rexroth Indramotion Mlc Xm42 Firmware

<= 12
💻
Bosch

Rexroth Indramotion Xlc Firmware

<= 12

References & Advisories

🔗 https://psirt.bosch.com/security-advisories/bosch-sa-741752.html
🔗 https://psirt.bosch.com/security-advisories/bosch-sa-741752.html

関連する脆弱性情報

CVE-2021-2328110.0

Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated remote code execution vulnerability. IPM soft...

CVE-2021-2132110.0

fastify-reply-from is an npm package which is a fastify plugin to forward the current http request to another server. In fastify-r...

CVE-2021-2132210.0

fastify-http-proxy is an npm package which is a fastify plugin for proxying your http requests to another server, with hooks. By c...

CVE-2021-3011610.0

Kaseya VSA before 9.5.7 allows credential disclosure, as exploited in the wild in July 2021. By default Kaseya VSA on premise offe...