User Configuration Vulnerability in ctrlX OS by Bosch
CVE-2025-24340
6.5MEDIUM
Key Information:
- Vendor
Bosch Rexroth Ag
- Status
- Vendor
- CVE Published:
- 30 April 2025
What is CVE-2025-24340?
A vulnerability in the user configuration file of ctrlX OS could enable a remote authenticated attacker with low privileges to access the plaintext passwords of other users. This flaw exposes sensitive information, posing a significant risk if exploited, allowing attackers to potentially gain unauthorized access to user accounts. It is crucial for organizations utilizing ctrlX OS to implement security measures to mitigate this vulnerability and protect their user data.
Affected Version(s)
ctrlX OS - Device Admin 1.12.0 <= 1.12.9
ctrlX OS - Device Admin 1.20.0 <= 1.20.7
ctrlX OS - Device Admin 2.6.0 <= 2.6.8
