CVE-2021-23857

Login with hash: The login routine allows the client to log in to the system not by using the password, but by using the hash of the password. Combined with CVE-2021-23858, this allows an attacker to subsequently login to the system.
References
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:bosch:rexroth_indramotion_mlc_l20_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:bosch:rexroth_indramotion_mlc_l20:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:bosch:rexroth_indramotion_mlc_l40_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:bosch:rexroth_indramotion_mlc_l40:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:bosch:rexroth_indramotion_mlc_l25_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:bosch:rexroth_indramotion_mlc_l25:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:bosch:rexroth_indramotion_mlc_l45_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:bosch:rexroth_indramotion_mlc_l45:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:bosch:rexroth_indramotion_mlc_l65_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:bosch:rexroth_indramotion_mlc_l65:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:bosch:rexroth_indramotion_mlc_l75_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:bosch:rexroth_indramotion_mlc_l75:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:bosch:rexroth_indramotion_mlc_l85_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:bosch:rexroth_indramotion_mlc_l85:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:bosch:rexroth_indramotion_mlc_xm22_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:bosch:rexroth_indramotion_mlc_xm22:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:bosch:rexroth_indramotion_mlc_xm21_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:bosch:rexroth_indramotion_mlc_xm21:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:bosch:rexroth_indramotion_mlc_xm41_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:bosch:rexroth_indramotion_mlc_xm41:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:bosch:rexroth_indramotion_mlc_xm42_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:bosch:rexroth_indramotion_mlc_xm42:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:bosch:rexroth_indramotion_xlc_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:bosch:rexroth_indramotion_xlc:-:*:*:*:*:*:*:*

Information

Published : 2021-10-04 11:15

Updated : 2022-08-30 09:12


NVD link : CVE-2021-23857

Mitre link : CVE-2021-23857


JSON object : View

CWE
CWE-287

Improper Authentication

Advertisement

dedicated server usa

Products Affected

bosch

  • rexroth_indramotion_mlc_l75_firmware
  • rexroth_indramotion_mlc_l65_firmware
  • rexroth_indramotion_xlc_firmware
  • rexroth_indramotion_mlc_l45_firmware
  • rexroth_indramotion_mlc_l45
  • rexroth_indramotion_mlc_l85_firmware
  • rexroth_indramotion_mlc_l25_firmware
  • rexroth_indramotion_mlc_l75
  • rexroth_indramotion_mlc_xm41_firmware
  • rexroth_indramotion_mlc_l65
  • rexroth_indramotion_mlc_l40
  • rexroth_indramotion_mlc_l40_firmware
  • rexroth_indramotion_mlc_xm21_firmware
  • rexroth_indramotion_mlc_xm41
  • rexroth_indramotion_mlc_l20_firmware
  • rexroth_indramotion_mlc_xm22_firmware
  • rexroth_indramotion_mlc_l20
  • rexroth_indramotion_mlc_l85
  • rexroth_indramotion_mlc_xm42
  • rexroth_indramotion_mlc_xm22
  • rexroth_indramotion_mlc_xm42_firmware
  • rexroth_indramotion_xlc
  • rexroth_indramotion_mlc_l25
  • rexroth_indramotion_mlc_xm21