critical10.0
CVE-2021-23857
Login with hash: The login routine allows the client to log in to the system not by using the password, but by using the hash of the password.
Impact
Login with hash: The login routine allows the client to log in to the system not by using the password, but by using the hash of the password. Combined with CVE-2021-23858, this allows an attacker to subsequently login to the system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bosch | Rexroth Indramotion Mlc L20 Firmware | through 12 |
| Bosch | Rexroth Indramotion Mlc L40 Firmware | through 12 |
| Bosch | Rexroth Indramotion Mlc L25 Firmware | through 12 |
| Bosch | Rexroth Indramotion Mlc L45 Firmware | through 12 |
| Bosch | Rexroth Indramotion Mlc L65 Firmware | through 12 |
| Bosch | Rexroth Indramotion Mlc L75 Firmware | through 12 |
| Bosch | Rexroth Indramotion Mlc L85 Firmware | through 12 |
| Bosch | Rexroth Indramotion Mlc Xm22 Firmware | through 12 |
| Bosch | Rexroth Indramotion Mlc Xm21 Firmware | through 12 |
| Bosch | Rexroth Indramotion Mlc Xm41 Firmware | through 12 |
| Bosch | Rexroth Indramotion Mlc Xm42 Firmware | through 12 |
| Bosch | Rexroth Indramotion Xlc Firmware | through 12 |