Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2025-48862

Ambiguous wording in the web interface of the ctrlX OS setup mechanism could lead the user to believe that the backup file is encrypted when a password is set. However, only the pr

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
bosch

Description

Ambiguous wording in the web interface of the ctrlX OS setup mechanism could lead the user to believe that the backup file is encrypted when a password is set. However, only the private key - if available in the backup - is encrypted, while the backup file itself remains unencrypted.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bosch Rexroth AG ctrlX OS - Setup

  • 1.20.0 to ≤ 1.20.1affected
  • 2.6.0 to ≤ 2.6.1affected
  • 3.6.0 to ≤ 3.6.2affected

References