CVEvulnerability

CVE-2023-45844

6.8 MEDIUM Published 2023-10-25 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-10-25
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.8 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0 ([email protected])
7.3 HIGH — CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Weaknesses
CWE-284

Description

The vulnerability allows a low privileged user that have access to the device when locked in Kiosk mode to install an arbitrary Android application and leverage it to have access to critical device settings such as the device power management or eventually the device secure settings (ADB debug).

Affected configurations

• boschrexroth ctrlx hmi web panel wr2107 firmware • boschrexroth ctrlx hmi web panel wr2110 firmware • boschrexroth ctrlx hmi web panel wr2115 firmware

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References