Bosch Rexroth ctrlX OS Web Application Arbitrary File Write Vulnerability

A vulnerability exists in the web application of Bosch Rexroth ctrlX OS, specifically within the 'Manages app data' functionality. This vulnerability allows remote authenticated (low-privileged) attackers to write arbitrary files to any file system path by sending a crafted HTTP request.

Impact

Exploitation of this vulnerability could lead to unauthorized file modifications, potentially allowing for further attacks or system manipulation.

Remediation

Users are advised to update to the latest versions of the affected applications. The update process may require a device reboot. To check if the update was successful, verify the installed version using the device's package management system.