Bosch ctrlX OS Username Enumeration Vulnerability

A vulnerability exists in the login functionality of the ctrlX OS web application, allowing remote unauthenticated attackers to enumerate valid usernames by sending multiple crafted HTTP requests. This issue affects several versions of the ctrlX OS web application, including those in the Device Admin and Solutions components.

Impact

Exploitation of this vulnerability allows for username enumeration, which could facilitate further attacks such as password guessing or phishing.

Remediation

Users are advised to update to the latest versions of the affected applications. The update may require a device reboot. To check if the updated versions are installed, use the device's package management system.