Vulnerabilities in Bosch
73 resultsCVE-2021-23849HIGHCross Site Request Forgery (CSRF) vulnerability in web based management interfaceEPSS 0.5%CVE-2026-56428HIGHThe SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly secured default conEPSS 0.5%CVE-2021-23846HIGHB426 Credential DisclosureEPSS 0.5%CVE-2023-28175HIGHImproper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within theEPSS 0.5%CVE-2024-33618HIGHUncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1
allows attackers to consume excessive amounts of disk spEPSS 0.5%CVE-2020-6781MEDIUMImproper Certificate Validation in Bosch Smart Home System App for iOSEPSS 0.5%CVE-2019-11893MEDIUMIncorrect privilege assignment in the app permission update API of the Bosch Smart Home Controller (SHC)EPSS 0.4%CVE-2023-49722HIGHNetwork port 8899 open in WiFi firmware of BCC101/BCC102/BCC50 products, that allows an attacker to connect to the device via same WiFi netwEPSS 0.4%CVE-2022-47648HIGHAn Improper Access Control vulnerability allows an attacker to access the control panel of the B420 without requiring any sort of authorizatEPSS 0.4%CVE-2025-32059HIGHStack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECUEPSS 0.4%CVE-2025-32061HIGHStack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECUEPSS 0.4%CVE-2025-32062HIGHStack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECUEPSS 0.4%CVE-2022-40183MEDIUMReflected Cross Site Scripting (XSS) in VIDEOJET multi 4000EPSS 0.4%CVE-2022-32540HIGHInformation Disclosure in Operator Client application in BVMS 10.1.1, 11.0 and 11.1.0 and VIDEOJET Decoder VJD-7513 versions 10.23 and 10.30EPSS 0.4%CVE-2022-40184MEDIUMStored Cross Site Scripting (XSS) in VIDEOJET multi 4000EPSS 0.4%CVE-2023-29241HIGHImproper Information in Cybersecurity Guidebook in Bosch Building Integration System (BIS) 5.0 may lead to wrong configuration which allows EPSS 0.4%CVE-2020-6790HIGHUncontrolled Search Path Element in Bosch Video Streaming Gateway InstallerEPSS 0.4%CVE-2020-6787HIGHUncontrolled Search Path Element in Bosch Video Client installerEPSS 0.4%CVE-2020-6789HIGHUncontrolled Search Path Element in Bosch Monitor Wall InstallerEPSS 0.4%CVE-2020-6788HIGHUncontrolled Search Path Element in Bosch Configuration Manager InstallerEPSS 0.4%