Bosch Rexroth Indramotion Mlc L40 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Bosch Rexroth Indramotion Mlc L40 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2021-23856 — CVSS 10.0 (critical): The web server is vulnerable to reflected XSS and therefore an attacker might be able to execute scripts on a client’s computer by…
• CVE-2021-23857 — CVSS 10.0 (critical): Login with hash: The login routine allows the client to log in to the system not by using the password, but by using the hash of the…
• CVE-2021-23858 — CVSS 8.6 (high): Information disclosure: The main configuration, including users and their hashed passwords, is exposed by an unprotected web server…