CVE-2021-23856: Bosch Rexroth Indramotion Mlc l20 Firmware

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

The web server is vulnerable to reflected XSS and therefore an attacker might be able to execute scripts on a client’s computer by sending the client a manipulated URL.

Affected products

• Bosch Rexroth Indramotion Mlc l20 Firmware: affected versions not specified
• Bosch Rexroth Indramotion Mlc l40 Firmware: affected versions not specified

Published 2021-10-04. Last modified 2026-06-17.