Skip to content
CVE PROGRAM SOURCE RECORD8.0 High

CVE-2025-48860

A vulnerability in the web application of the ctrlX OS setup mechanism facilitated an authenticated (low privileged) attacker to gain remote access to backup archives created by a

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
bosch

Description

A vulnerability in the web application of the ctrlX OS setup mechanism facilitated an authenticated (low privileged) attacker to gain remote access to backup archives created by a user with elevated permissions. Depending on the content of the backup archive, the attacker may have been able to access sensitive data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bosch Rexroth AG ctrlX OS - Setup

  • 1.20.0 to ≤ 1.20.1affected
  • 2.6.0 to ≤ 2.6.1affected
  • 3.6.0 to ≤ 3.6.2affected

References