Lucene search

[email protected]CVE-2023-41255

HistoryOct 25, 2023 - 6:17 p.m.

CVE-2023-41255

2023-10-2518:17:30

CWE-306

[email protected]

web.nvd.nist.gov

cve-2023-41255

vulnerability

unprivileged user

root shell

tpc-110w

adb

android debug bridge

authentication

8.8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.7%

JSON

The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on the device itself abusing the lack of authentication
of the ‘su’ binary file installed on the device that can be accessed through the ADB (Android Debug Bridge) protocol exposed on the network.

Affected configurations

NVD

Node

boschrexrothctrlx_hmi_web_panel_wr2107Match-

AND

boschrexrothctrlx_hmi_web_panel_wr2107_firmware

Node

boschrexrothctrlx_hmi_web_panel_wr2110Match-

AND

boschrexrothctrlx_hmi_web_panel_wr2110_firmware

Node

boschrexrothctrlx_hmi_web_panel_wr2115Match-

AND

boschrexrothctrlx_hmi_web_panel_wr2115_firmware

CPENameOperatorVersion
boschrexroth:ctrlx_hmi_web_panel_wr2107_firmwareboschrexroth ctrlx hmi web panel wr2107 firmwareeq*

CPE	Name	Operator	Version
boschrexroth:ctrlx_hmi_web_panel_wr2107_firmware	boschrexroth ctrlx hmi web panel wr2107 firmware	eq	*

CNA Affected

[
  {
    "vendor": "Rexroth",
    "product": "ctrlX HMI Web Panel - WR21 (WR2107)",
    "versions": [
      {
        "version": "all",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Rexroth",
    "product": "ctrlX HMI Web Panel - WR21 (WR2110)",
    "versions": [
      {
        "version": "all",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Rexroth",
    "product": "ctrlX HMI Web Panel - WR21 (WR2115)",
    "versions": [
      {
        "version": "all",
        "status": "affected"
      }
    ]
  }
]

References

psirt.bosch.com/security-advisories/BOSCH-SA-175607.html

8.8 High

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.7%

JSON

Related for CVE-2023-41255

cvelist1 prion1 nvd1