Bosch-rexroth-ag
15 CVEs tracked since 2025. Since Apr 2025, none of them reached CISA KEV.
Bosch-rexroth-ag CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2025-04 | 15 | 0 |
Products
The products that kept showing up in Bosch-rexroth-ag's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 15 most recently published vulnerabilities affecting Bosch-rexroth-ag.
- CVE-2025-48862Ambiguous wording in the web interface of the ctrlX OS setup mechanism could lead the user to believe that the backup file is encrypted when a password is set. However, only the private key - if a...7.1
- CVE-2025-48861A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote, unauthenticated attacker to access and extract internal application data, including potential debug logs...5.3
- CVE-2025-48860A vulnerability in the web application of the ctrlX OS setup mechanism facilitated an authenticated (low privileged) attacker to gain remote access to backup archives created by a user with elevat...8.0
- CVE-2025-27532A vulnerability in the “Backup & Restore” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to access secret information via multiple craft...6.5
- CVE-2025-24351A vulnerability in the “Remote Logging” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to execute arbitrary OS commands in the context ...8.8
- CVE-2025-24350A vulnerability in the “Certificates and Keys” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to write arbitrary certificates in arbitr...7.1
- CVE-2025-24349A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to delete the configuration of physical netwo...7.1
- CVE-2025-24348A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to manipulate the wireless network configura...5.4
- CVE-2025-24347A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to manipulate the network configuration file...6.5
- CVE-2025-24346A vulnerability in the “Proxy” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to manipulate the “/etc/environment” file via a crafte...7.5
- CVE-2025-24345A vulnerability in the “Hosts” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to manipulate the “hosts” file in an unintended manne...6.3
- CVE-2025-24344A vulnerability in the error notification messages of the web application of ctrlX OS allows a remote unauthenticated attacker to inject arbitrary HTML tags and, possibly, execute arbitrary client-...6.3
- CVE-2025-24343A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to write arbitrary files in arbitrary file sys...5.4
- CVE-2025-24342A vulnerability in the login functionality of the web application of ctrlX OS allows a remote unauthenticated attacker to guess valid usernames via multiple crafted HTTP requests.5.3
- CVE-2025-24341A vulnerability in the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to induce a Denial-of-Service (DoS) condition on the device via multiple crafted HTTP requ...6.5
The record
- Peak rank
- #56 in Apr 2025
- Busiest month shown
- Apr 2025, 15 CVEs
- Months with a KEV entry
- 0 since Apr 2025
- Monthly snapshots
- 1 since 2025