CVE-2023-45844
- State
- Published
- Severity
- 7.3 High
- Published
- Oct 25, 2023
- Updated
- Sep 10, 2024
- Reserved
- Oct 18, 2023
Description
The vulnerability allows a low privileged user that have access to the device when locked in Kiosk mode to install an arbitrary Android application and leverage it to have access to critical device settings such as the device power management or eventually the device secure settings (ADB debug).
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 7.3 High | CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H | bosch |
Weaknesses
- CWE-284 Improper Access Control
Affected Products
| Product | Versions |
|---|---|
ctrlX HMI Web Panel - WR21 (WR2107)Rexroth |
|
ctrlX HMI Web Panel - WR21 (WR2110)Rexroth |
|
ctrlX HMI Web Panel - WR21 (WR2115)Rexroth |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.