Bosch Rexroth ctrlX OS Password Recovery Vulnerability in User Configuration File

A vulnerability exists in the user configuration file of Bosch Rexroth ctrlX OS that may allow a remote authenticated (low-privileged) attacker to retrieve plaintext passwords of other users. This issue arises from inadequate password hashing practices, enabling the extraction of sensitive information through authenticated access.

Impact

Exploitation of this vulnerability could lead to unauthorized access to other users' plaintext passwords, potentially allowing for further exploitation or impersonation.

Remediation

Users are advised to update to the latest versions of the affected applications. The update process may require a device reboot. To check if the update has been applied, use the device's package management system.