CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2021-23857
Critical (9.8) in bosch. EPSS 1.2% chance of exploitation in the next 30 days.
Login with hash: The login routine allows the client to log in to the system not by using the password, but by using the hash of the password. Combined with CVE-2021-23858, this allows an attacker to subsequently login to the system.
Severity
- EPSS
- 1.2% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-287, CWE-836
- Published
- Modified
- Record from
- the NVD, synced
Affected
- bosch:rexroth_indramotion_mlc_l20_firmware
- bosch:rexroth_indramotion_mlc_l25_firmware
- bosch:rexroth_indramotion_mlc_l40_firmware
- bosch:rexroth_indramotion_mlc_l45_firmware
- bosch:rexroth_indramotion_mlc_l65_firmware
- bosch:rexroth_indramotion_mlc_l75_firmware
- bosch:rexroth_indramotion_mlc_l85_firmware
- bosch:rexroth_indramotion_mlc_xm21_firmware
- bosch:rexroth_indramotion_mlc_xm22_firmware
- bosch:rexroth_indramotion_mlc_xm41_firmware
- bosch:rexroth_indramotion_mlc_xm42_firmware
- bosch:rexroth_indramotion_xlc_firmware