CVE Feed

    Dashboard / CVE / CVE-2023-43488

    CVE-2023-43488

    The vulnerability allows a low privileged (untrusted) application to modify a critical system property that should be denied, in order to enable the ADB (Android Debug Bridge) protocol to be exposed on the network, exploiting it to gain a privileged shell on the device without requiring the physical access through USB.

    Published:Oct 25, 2023
    Last Modified:Nov 21, 2024
    EPS:Oct 25, 2023
    EPSS Score:0.0006
    CVSS Score:7.9

    Affected Products

    Vendor
    Boschrexroth
    Product
    Ctrlx Hmi Web Panel Wr2107
    Vendor
    Boschrexroth
    Product
    Ctrlx Hmi Web Panel Wr2107 Firmware
    Vendor
    Boschrexroth
    Product
    Ctrlx Hmi Web Panel Wr2110
    Vendor
    Boschrexroth
    Product
    Ctrlx Hmi Web Panel Wr2110 Firmware
    Vendor
    Boschrexroth
    Product
    Ctrlx Hmi Web Panel Wr2115
    Vendor
    Boschrexroth
    Product
    Ctrlx Hmi Web Panel Wr2115 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-862 Missing Authorization

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-665 Exploitation of Thunderbolt Protection Flaws

    Related CVEs

    CVE-2023-46102 (CVSS 8.8) — The Android Client application, when enrolled to the AppHub server, connects to an MQTT broker to exchange me…
    CVE-2023-45851 (CVSS 8.8) — The Android Client application, when enrolled to the AppHub server,connects to an MQTT broker without enforcin…
    CVE-2023-45321 (CVSS 8.3) — The Android Client application, when enrolled with the define method 1 (the user manually inserts the server …
    CVE-2023-45220 (CVSS 8.8) — The Android Client application, when enrolled with the define method 1(the user manually inserts the server ip…
    CVE-2023-41372 (CVSS 7.8) — The vulnerability allows an unprivileged (untrusted) third- party application to arbitrary modify the server s…
    CVE-2023-41960 (CVSS 7.1) — The vulnerability allows an unprivileged(untrusted) third-party application to interact with a content-provide…
    CVE-2023-41255 (CVSS 8.8) — The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root …
    CVE-2023-45844 (CVSS 6.8) — The vulnerability allows a low privileged user that have access to the device when locked in Kiosk mode to ins…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High