CVE-2023-43488

CVE-2023-43488 describes a vulnerability where a low-privileged (untrusted) application can modify a critical system property to enable the Android Debug Bridge (ADB) protocol over the network, potentially exposing a privileged shell on the device without USB access. Public sources in the connect...

CVE-2023-45321

The CVE-2023-45321 issue affects the Android Client application when enrolled with define method 1, where the app retrieves sensitive data (IP address and credentials to the MQTT broker) over HTTP instead of HTTPS. The behavior is not configurable by the user and results from plain HTTP transmiss...

CVE-2023-45844

The vulnerability CVE-2023-45844 affects Bosch ctrlX HMI Web Panel WR21. It allows a low-privileged user, while locked in Kiosk mode, to install an arbitrary Android application and leverage it to access critical device settings (power management, and potentially secure settings such as ADB debug...

CVE-2023-41372

The CVE-2023-41372 issue affects the Android Client application. It allows an unprivileged third‑party app to arbitrarily modify the client’s server settings, causing the device to connect to an attacker‑controlled malicious server. Root cause: forging a valid broadcast intent encrypted with a ha...

CVE-2023-46102

CVE-2023-46102 describes a vulnerability in the Android Client (enrolled to AppHub) that communicates with an MQTT broker for remote management of the HMI device. The protocol is built on top of MQTT and uses a hard-coded DES symmetric key, which can be recovered by reversing the Android Client a...

CVE-2023-45220

CVE-2023-45220 concerns the Android Client when enrolled via define method 1 (manual server IP entry). The vulnerability arises because it uses HTTP to retrieve sensitive information (IP address and credentials to connect to a remote MQTT broker) instead of HTTPS, and this behavior is not configu...

CVE-2023-41255

CVE-2023-41255 affects the TPC-110W device (Bosch context appears in sources). The issue allows an unprivileged user with subnet access to obtain a root shell by abusing the lack of authentication of the su binary exposed via ADB (Android Debug Bridge). The connected documents provide this core t...

CVE-2023-41960

The CVE-2023-41960 entry describes an issue where an unprivileged third-party application can interact with a content-provider unsafely exposed by the Android Agent application, potentially allowing modification of sensitive settings in the Android Client. Affected component: Android Agent’s cont...

CVE-2023-45851

The CVE-2023-45851 entry describes an issue in the Android Client (enrolled to the AppHub server) where the client connects to an MQTT broker without enforcing server authentication. This allows an attacker to persuade the Android Client to connect to a malicious MQTT broker, enabling the attacke...