Approved changes feed: RSS · Atom

cpe:2.3:h:bosch:rexroth_indramotion_mlc_l75:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorBosch (fd8ddba2-7d59-56e9-89d8-6fcadc94214e)
ProductRexroth Indramotion Mlc L75 (7bea2b38-87f5-5346-8d0b-5fabffc6d9f9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-23858 not_vulnerable 2026-06-08 05:30:03.316087 Information disclosure
HIGH (8.6)
Information disclosure: The main configuration, including users and their hashed passwords, is exposed by an unprotected web server resource and can be accessed without authentication. Additionally, device details are exposed which include the serial number and the firmware version by another unprotected web server resource.
Published: 2021-10-04T17:32:22.000Z
Updated: 2024-08-03T19:14:09.398Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-23857 not_vulnerable 2026-06-08 05:30:03.304300 Login with hash
CRITICAL (10)
Login with hash: The login routine allows the client to log in to the system not by using the password, but by using the hash of the password. Combined with CVE-2021-23858, this allows an attacker to subsequently login to the system.
Published: 2021-10-04T17:32:36.000Z
Updated: 2024-08-03T19:14:09.701Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.