ZDI-CAN-28113
HIGH 7.8
Overdue
Dec 09, 2025
Bosch Rexroth
Bosch Rexroth is a major industrial automation and hydraulics manufacturer whose products are widely used in manufacturing and control systems. This high-severity vulnerability (CVSS 7.8) requires local access to exploit and user interaction, but requires no authentication and can result in complete compromise of confidentiality, integrity, and availability. Security teams should monitor for patches following the April 2026 vendor deadline and prioritize updating Bosch Rexroth systems in environments where local access controls may be weak.
Advisory Details
Researcher
Discovered by:
kimiya
Reported
December 09, 2025
Deadline
April 08, 2026
9d overdue
CVSS Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H