Vulnerabilities

TI-2021-06220 CVE-2021-23857 · GHSA-rpjw-wq4m-v5j8

Improper authentication in Rexroth IndraMotion MLC L25, L45, L65, L75, L85, XM21, XM22…

MEDIUM 45

Login with hash: The login routine allows the client to log in to the system not by using the password, but by using the hash of the password.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01234 Published 2021-10-04 No fix listed CWE-836

TI-2021-06221 CVE-2021-23858 · GHSA-9jpf-vg83-7m3q

Information disclosure in Rexroth IndraMotion MLC L25, L45, L65, L75, L85, XM21, XM22…

MEDIUM 40

Information disclosure: The main configuration, including users and their hashed passwords, is exposed by an unprotected web server resource and can be accessed without authentication.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01243 Published 2021-10-04 No fix listed CWE-200

Vulnerabilities

Filters

Improper authentication in Rexroth IndraMotion MLC L25, L45, L65, L75, L85, XM21, XM22…

Information disclosure in Rexroth IndraMotion MLC L25, L45, L65, L75, L85, XM21, XM22…