Bosch Rexroth ctrlX OS Certificates and Keys Functionality Arbitrary Certificate Write Vulnerability

A vulnerability exists in the 'Certificates and Keys' feature of the Bosch Rexroth ctrlX OS web application. This vulnerability allows remote authenticated (low-privileged) attackers to write arbitrary certificates to any file system path by sending a crafted HTTP request.

Impact

Exploitation of this vulnerability could lead to unauthorized certificate installation, potentially allowing for man-in-the-middle attacks or other malicious activities that rely on fraudulent certificates.

Remediation

Users are advised to update to the latest versions of the affected ctrlX OS applications. The update may require a device reboot. To check if the updated versions are installed, use the device's package management system.