Multiple vulnerabilities in Bosch Rexroth ctrlX WR21 HMI

Published: 2023-10-25

Risk	Low
Patch available	NO
Number of vulnerabilities	2
CVE-ID	N/A
CWE-ID	CWE-284 CWE-77
Exploitation vector	Local
Public exploit	N/A
Vulnerable software	ctrlX WR21 HMI - WR21 (WR2107) Hardware solutions / Other hardware appliances ctrlX WR21 HMI - WR21 (WR2110) Hardware solutions / Other hardware appliances ctrlX WR21 HMI - WR21 (WR2115) Hardware solutions / Other hardware appliances
Vendor	Bosch Rexroth

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) Improper access control

EUVDB-ID: #VU82362

Risk: Low

CVSSv4.0: 4 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: N/A

CWE-ID: CWE-284 - Improper Access Control

Exploit availability: No

Description

The vulnerability allows a local attacker to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions when the Kiosk mode is used in conjunction with Google Chrome. An attacker with physical access can bypass implemented security restrictions and gain full root access.

Mitigation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

Vulnerable software versions

ctrlX WR21 HMI - WR21 (WR2107): All versions

ctrlX WR21 HMI - WR21 (WR2110): All versions

ctrlX WR21 HMI - WR21 (WR2115): All versions

CPE2.3

External links

https://psirt.bosch.com/security-advisories/bosch-sa-175607.html

Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Command Injection

EUVDB-ID: #VU82364