CVE Published: 25/10/2023 |
CVE Updated: 17/09/2024 |
CVE Year: 2023 Source: bosch |
Vendor: Rexroth |
Product: ctrlX HMI Web Panel - WR21 (WR2107) Status : PUBLISHED
CVE-2023-43488 Description
The vulnerability allows a low privileged (untrusted) application to
modify a critical system property that should be denied, in order to enable the ADB (Android Debug Bridge) protocol to be exposed on the network, exploiting it to gain a privileged shell on the device without requiring the physical access through USB.
Metrics
CVSS Version: 3.1 |
Base Score: 7.9 HIGH Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:L