CVE-2025-48860 describes a vulnerability in the web application of the ctrlX OS setup mechanism, allowing an authenticated, low-privileged attacker to remotely access backup archives created by high-privileged users. This could lead to the exposure of sensitive data, depending on the archive's contents. The vulnerability carries a CVSS score of 8.0 (HIGH), indicating a high severity with network access, low attack complexity, and high impact on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Bosch Rexroth AG | CtrlX OS - Setup | >= 1.20.0, <= 1.20.1, >= 2.6.0, <= 2.6.1, >= 3.6.0, <= 3.6.2CNA affected |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.3 Bluesky, 0.1 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Vulnerabilities in ctrlX OS - Setup
Aug 14, 2025Vulnerabilities in ctrlX OS - Setup
Aug 14, 2025Vulnerabilities in ctrlX OS - Setup
Aug 14, 2025Vulnerabilities in ctrlX OS - Setup
Aug 14, 2025Vulnerabilities in ctrlX OS - Setup
Aug 14, 2025Vulnerabilities in ctrlX OS - Setup
Aug 14, 2025