ZDI-CAN-28115 HIGH 7.8 Overdue Dec 18, 2025

Bosch Rexroth

Bosch Rexroth is a major industrial automation and hydraulics manufacturer whose products are widely deployed in manufacturing and infrastructure environments. This high-severity local vulnerability (CVSS 7.8) requires no authentication and user interaction to execute, allowing an attacker with local access to achieve complete compromise including confidentiality, integrity, and availability impacts on affected systems. Security teams should monitor for exploitation attempts targeting Bosch Rexroth industrial control systems and ensure local access controls are strictly enforced until patches become available after April 2026.

Advisory Details
Researcher Discovered by: kimiya
Reported December 18, 2025
Deadline April 17, 2026 3d overdue
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy