High severity · published Oct 25, 2023
CVE-2023-45851
The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any server authentication. This issue allows an attacker to…
8.8
CVSS
0.5%
EPSS
No
On KEV
Description
The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any server authentication.
This issue allows an attacker to force the Android Client application to connect to a malicious MQTT broker, enabling it to send fake messages to the HMI device
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 44% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CH
ctrlX HMI Web Panel - WR21 (WR2107) · Bosch Rexroth AG
All versions, or not specified · source: vendor
CH
ctrlX HMI Web Panel - WR21 (WR2110) · Bosch Rexroth AG
All versions, or not specified · source: vendor
CH
ctrlX HMI Web Panel - WR21 (WR2115) · Bosch Rexroth AG
All versions, or not specified · source: vendor
CH
Ctrlx Hmi Web Panel Wr2107 Firmware · Boschrexroth
All versions, or not specified · source: NVD
CH
Ctrlx Hmi Web Panel Wr2110 Firmware · Boschrexroth
All versions, or not specified · source: NVD
CH
Ctrlx Hmi Web Panel Wr2115 Firmware · Boschrexroth
All versions, or not specified · source: NVD
CH
Ctrlx Hmi Web Panel Wr2107 · Boschrexroth
before RC7(Build date 20231107) · source: CISA
Affected product
CH
ctrlX HMI Web Panel - WR21 (WR2107)
Bosch Rexroth AG
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-45851
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-45851
Mitigation
https://psirt.bosch.com/security-advisories/BOSCH-SA-175607.html
More from ctrlX HMI Web Panel - WR21 (WR2107)
8.8
CVE-2023-46102
The Android Client application, when enrolled to the AppHub server, connects to an MQTT broker to exchange messages and receive commands to execute on the HMI device
8.8
CVE-2023-45321
The Android Client application, when enrolled with the define method 1 (the user manually inserts the server ip address), use HTTP protocol to retrieve sensitive information (ip…