Ctrlx Hmi Web Panel Wr2110 Firmware vulnerabilities

Product

Ctrlx Hmi Web Panel Wr2110 Firmware

by Boschrexroth · last CVE Oct 25, 2023

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities9 In the news0 Timeline

Severity mix

Critical 0High 7Medium 1Low 1

Severity

All severities9 Critical0 High7 Medium1 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Ctrlx Hmi Web Panel Wr2110 Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-46102	8.8	0%	Oct 25	The Android Client application, when enrolled to the AppHub server, connects to an MQTT broker to exchange messages and receive commands to execute on the HMI device Affected: All versions, or not specified
CVE-2023-45851	8.8	1%	Oct 25	The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any server authentication. This issue allows an attacker to… Affected: All versions, or not specified
CVE-2023-45321	8.8	0%	Oct 25	The Android Client application, when enrolled with the define method 1 (the user manually inserts the server ip address), use HTTP protocol to retrieve sensitive information (ip… Affected: All versions, or not specified
CVE-2023-45220	8.8	0%	Oct 25	The Android Client application, when enrolled with the define method 1(the user manually inserts the server ip address), use HTTP protocol to retrieve sensitive information (ip… Affected: All versions, or not specified
CVE-2023-41255	8.8	0%	Oct 25	The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on the device itself abusing the lack of authentication of… Affected: All versions, or not specified
CVE-2023-41372	7.8	0%	Oct 25	The vulnerability allows an unprivileged (untrusted) third- party application to arbitrary modify the server settings of the Android Client application, inducing it to connect to… Affected: All versions, or not specified
CVE-2023-43488	7.8	0%	Oct 25	The vulnerability allows a low privileged (untrusted) application to modify a critical system property that should be denied, in order to enable the ADB (Android Debug Bridge)… Affected: All versions, or not specified