CVE-2021-23857: Bosch Rexroth Indramotion Mlc l20 Firmware

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Login with hash: The login routine allows the client to log in to the system not by using the password, but by using the hash of the password. Combined with CVE-2021-23858, this allows an attacker to subsequently login to the system.

Affected products

• Bosch Rexroth Indramotion Mlc l20 Firmware: up to and including 12
• Bosch Rexroth Indramotion Mlc l25 Firmware: up to and including 12
• Bosch Rexroth Indramotion Mlc l40 Firmware: up to and including 12
• Bosch Rexroth Indramotion Mlc l45 Firmware: up to and including 12
• Bosch Rexroth Indramotion Mlc l65 Firmware: up to and including 12
• Bosch Rexroth Indramotion Mlc l75 Firmware: up to and including 12
• Bosch Rexroth Indramotion Mlc l85 Firmware: up to and including 12
• Bosch Rexroth Indramotion Mlc XM21 Firmware: up to and including 12
• Bosch Rexroth Indramotion Mlc XM22 Firmware: up to and including 12
• Bosch Rexroth Indramotion Mlc XM41 Firmware: up to and including 12
• Bosch Rexroth Indramotion Mlc XM42 Firmware: up to and including 12
• Bosch Rexroth Indramotion Xlc Firmware: up to and including 12

Published 2021-10-04. Last modified 2026-06-17.