Bosch ctrlX OS Web Application Vulnerability Allowing Remote Unauthenticated Attacks

A vulnerability in the web application of Bosch ctrlX OS allows remote unauthenticated attackers to conduct various attacks against users of the vulnerable system. This includes web cache poisoning and Man-in-the-Middle (MitM) attacks, facilitated by sending crafted HTTP requests.

Impact

Exploitation of this vulnerability could lead to web cache poisoning or Man-in-the-Middle attacks, where an attacker could intercept and potentially alter communications between users and the vulnerable system.

Remediation

Users are strongly recommended to update to the latest versions of the affected components. The update may require a reboot of the device, temporarily making it unavailable. To verify that the updated versions are installed, check the version using the device's package management system.