Bosch Rexroth AG ctrlX HMI Web Panel - WR21 (WR2107)

• CVE-2023-46102 High 8.8 The Android Client application, when enrolled to the AppHub server, connects to an MQTT broker to exchange messages and receive commands to execute on the HMI device. The protocol builds on top of M 0.5%
• CVE-2023-45851 High 8.8 The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcing any server authentication.  This issue allows an attacker to force the Android Clie 0.5%
• CVE-2023-45321 High 8.3 The Android Client application, when enrolled with the define method 1 (the user manually inserts the server ip address), use HTTP protocol to retrieve sensitive information (ip address and credentia 0.1%