{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Disclosure is not limited", "tlp": { "label": "WHITE", "url": "https://us-cert.cisa.gov/tlp/" } }, "lang": "en-US", "notes": [ { "category": "legal_disclaimer", "text": "With respect to Directive (EU) 2019/770 and Directive (EU) 2019/771 and their national transposition laws, please note:\n\nIt is your responsibility to download and/or install any security updates provided by us, for example to maintain product or data security. If you fail to install a security update provided to you within a reasonable period of time, we will not be liable for any product defect solely due to the absence of such security update.\n\nAlternatively, we are entitled to directly download and/or install security updates regardless of your settings. In these cases, we will provide you with the relevant information, e.g. in this security advisory. ", "title": "Security Update Information" }, { "category": "summary", "text": "Several fieldbus couplers sold by Bosch Rexroth contain technology from Phoenix Contact. The manufacturer published a security bulletin about a weakness in the web-based administration interface. A successful attack leads to an overload of the device and the hardware watchdog is triggered. Process data behaves according to the configured substitute value behavior. The bus coupler requires a manual restart (resetting the power supply, pressing the reset button or executing the SNMP reset command) to reestablish communication within the Industrial Ethernet (e.g. PROFINET IO, Modbus/TCP, EtherNet/IP).", "title": "Summary" }, { "text": "Vulnerability classification has been performed using the CVSS v3.1 scoring system . The CVSS environmental score is specific to each customer’s environment and should be defined by the customer to attain a final scoring. ", "title": "CVSS Scoring", "category": "general" } ], "publisher": { "category": "vendor", "contact_details": "psirt@bosch.com", "name": "Robert Bosch GmbH", "namespace": "https://psirt.bosch.com/" }, "references": [ { "category": "self", "summary": "Bosch Security Advisories", "url": "https://psirt.bosch.com/security-advisories" }, { "category": "self", "summary": "Bosch Rexroth Advisories", "url": "https://www.boschrexroth.com/en/dc/product-security/security-advisories/" }, { "category": "self", "summary": "Bosch Rexroth Security Guideline Electric Drives and Controls", "url": "https://www.boschrexroth.com/various/utilities/mediadirectory/download/index.jsp?object_nr=R911342562" }, { "category": "self", "summary": "Third Party Supplier Advisory", "url": "https://assets.phoenixcontact.com/file/f4205726-881c-4184-b010-615e4bea778d/media/original?pcsa-2025-00006_vde-2025-029.pdf" } ], "title": "BOSCH-SA-757244", "tracking": { "generator": { "engine": { "name": "Secvisogram", "version": "2.5.33" }, "date": "2025-08-14T07:57:58.958Z" }, "id": "BOSCH-SA-757244", "initial_release_date": "2025-08-14T09:00:00.000Z", "revision_history": [ { "date": "2025-08-14T10:00:00.000Z", "legacy_version": "Initial", "number": "1", "summary": "Initial Publication" } ], "status": "final", "version": "1", "current_release_date": "2025-08-14T09:00:00.000Z" } }, "product_tree": { "branches": [ { "branches": [ { "category": "product_name", "name": "Bosch Rexroth AG S20-PN-BK+ (R911173359)", "branches": [ { "category": "product_version", "name": "*", "product": { "product_id": "CSAFPID-0001", "name": "Bosch Rexroth Bosch Rexroth AG S20-PN-BK+ (R911173359)" } } ] }, { "category": "product_name", "name": "Bosch Rexroth AG S20-ETH-BK (R911173905)", "branches": [ { "category": "product_version_range", "name": "<1.34", "product": { "name": "Bosch Rexroth Bosch Rexroth AG S20-ETH-BK (R911173905) <1.34", "product_id": "CSAFPID-0002" } } ] }, { "category": "product_name", "name": "Bosch Rexroth AG S20-EIP-BK (R911173904)", "branches": [ { "category": "product_version", "name": "*", "product": { "name": "Bosch Rexroth Bosch Rexroth AG S20-EIP-BK (R911173904) *", "product_id": "CSAFPID-0003" } } ] }, { "category": "product_name", "name": "Bosch Rexroth AG R-IL ETH BK DI8 DO4 2TX-PAC (R911171726)", "branches": [ { "category": "product_version", "name": "*", "product": { "name": "Bosch Rexroth Bosch Rexroth AG R-IL ETH BK DI8 DO4 2TX-PAC (R911171726) *", "product_id": "CSAFPID-0004" } } ] } ], "category": "vendor", "name": "Bosch Rexroth" } ] }, "vulnerabilities": [ { "cve": "CVE-2025-2813", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "notes": [ { "category": "description", "text": "An unauthenticated remote attacker can cause a Denial of Service by sending a large number of requests to the http service on port 80." } ], "product_status": { "known_affected": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004" ] }, "remediations": [ { "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004" ], "category": "mitigation", "details": "If possible, protect your network by blocking access to port 80 on the affected devices." }, { "details": "If the use of scanners is mandatory for network security in closed production networks, it is recommended to exclude or disable denial of service tests that target port 80.", "category": "mitigation", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004" ] }, { "category": "mitigation", "details": "In general, when using the devices, it is strongly recommended to implement the measures for network segmentation described in the Bosch Rexroth Security Guideline Electric Drives and Controls", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004" ] } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "temporalScore": 7.5, "temporalSeverity": "HIGH", "environmentalScore": 7.5, "environmentalSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0003", "CSAFPID-0004" ] } ] } ] }