CVE-2023-41372 — Rexroth / ctrlX HMI Web Panel - WR21 (WR2107)

Description (CNA)

The vulnerability allows an unprivileged (untrusted) third- party application to arbitrary modify the server settings of the Android Client application, inducing it to connect to an attacker - controlled malicious server.This is possible by forging a valid broadcast intent encrypted with a hardcoded RSA key pair

Affected (CNA)

Vendor / product	Versions
Rexroth / ctrlX HMI Web Panel - WR21 (WR2107)	affected all
Rexroth / ctrlX HMI Web Panel - WR21 (WR2110)	affected all
Rexroth / ctrlX HMI Web Panel - WR21 (WR2115)	affected all

CWE

CWE-798

References

https://psirt.bosch.com/security-advisories/BOSCH-SA-175607.html

ADP enrichment

CVE

No English description supplied.

https://psirt.bosch.com/security-advisories/BOSCH-SA-175607.html

CISA-ADP

No English description supplied.

No references supplied.