CVE-2023-45851 json
The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any server authentication.
published 2023-10-25 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-50121
- cvss
- 8.8
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.5%
- EPSS 0.5% chance of exploitation in 30 days, percentile 44%
- public exploits
- 0
- none known
Summary
The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any server authentication.
This issue allows an attacker to force the Android Client application to connect to a malicious MQTT broker, enabling it to send fake messages to the HMI device
Patch / fix
- boschrexroth ctrlx_hmi_web_panel_wr2107 RC7(Build date 20231107)
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- total
- Assessed
- 2 y ago
Exploit prediction
0.52% chance of exploitation in the next 30 days, higher than 44% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 8.8 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 3.1 | 8.8 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected products
- Bosch Rexroth AG ctrlX HMI Web Panel - WR21 (WR2107)
- Bosch Rexroth AG ctrlX HMI Web Panel - WR21 (WR2110)
- Bosch Rexroth AG ctrlX HMI Web Panel - WR21 (WR2115)
- boschrexroth ctrlx_hmi_web_panel_wr2107
Classification
- Weakness
-
- CWE-306 Missing Authentication for Critical Functionality
References
-
psirt.bosch.com
/security-advisories/BOSCH-SA-175607.html
vendor-advisory, mitigation
Sources
- CVE List CVE-2023-45851
- NVD CVE-2023-45851
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.