CVE-2023-41960: Boschrexroth Ctrlx HMI Web Panel WR2107 Firmware

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

The vulnerability allows an unprivileged(untrusted) third-party application to interact with a content-provider unsafely exposed by the Android Agent application, potentially modifying sensitive settings of the Android Client application itself.

Affected products

• Boschrexroth Ctrlx HMI Web Panel WR2107 Firmware: any version
• Boschrexroth Ctrlx HMI Web Panel WR2110 Firmware: any version
• Boschrexroth Ctrlx HMI Web Panel WR2115 Firmware: any version

Published 2023-10-25. Last modified 2026-06-17.