BOSCH-SA-757244
Several fieldbus couplers sold by Bosch Rexroth contain technology from Phoenix Contact. The manufacturer published a security bulletin about a weakness in the web-based administration interface. A successful attack leads to an overload of the device and the hardware watchdog is triggered. Process data behaves according to the configured substitute value behavior. The bus coupler requires a manual restart (resetting the power supply, pressing the reset button or executing the SNMP reset command) to reestablish communication within the Industrial Ethernet (e.g. PROFINET IO, Modbus/TCP, EtherNet/IP).
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-2813US | — | — | ||
An unauthenticated remote attacker can cause a Denial of Service by sending a large number of requests to the http service on port 80. | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (4)
- MitigationBosch Rexroth AG R-IL ETH BK DI8 DO4 2TX-PAC (R911171726)
If possible, protect your network by blocking access to port 80 on the affected devices.
- MitigationBosch Rexroth AG S20-EIP-BK (R911173904)
If possible, protect your network by blocking access to port 80 on the affected devices.
- MitigationBosch Rexroth AG S20-ETH-BK (R911173905)
If possible, protect your network by blocking access to port 80 on the affected devices.
- MitigationBosch Rexroth AG S20-PN-BK+ (R911173359)
If possible, protect your network by blocking access to port 80 on the affected devices.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan