BOSCH-SA-757244
Several fieldbus couplers sold by Bosch Rexroth contain technology from Phoenix Contact. The manufacturer published a security bulletin about a weakness in the web-based administration interface. A successful attack leads to an overload of the device and the hardware watchdog is triggered. Process data behaves according to the configured substitute value behavior. The bus coupler requires a manual restart (resetting the power supply, pressing the reset button or executing the SNMP reset command) to reestablish communication within the Industrial Ethernet (e.g. PROFINET IO, Modbus/TCP, EtherNet/IP).
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-2813US | — | — | ||
An unauthenticated remote attacker can cause a Denial of Service by sending a large number of requests to the http service on port 80. | ||||
references
External citations — patches, advisories, analysis.
remediations (4)
- MitigationBosch Rexroth AG R-IL ETH BK DI8 DO4 2TX-PAC (R911171726)
If possible, protect your network by blocking access to port 80 on the affected devices.
- MitigationBosch Rexroth AG S20-EIP-BK (R911173904)
If possible, protect your network by blocking access to port 80 on the affected devices.
- MitigationBosch Rexroth AG S20-ETH-BK (R911173905)
If possible, protect your network by blocking access to port 80 on the affected devices.
- MitigationBosch Rexroth AG S20-PN-BK+ (R911173359)
If possible, protect your network by blocking access to port 80 on the affected devices.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan