Skip to content
Noroxi

Bosch records

109 published records for vendor bosch.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
15
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

109 records
  • CVE-2020-6779
    41Plan

    Hard-coded Credentials in the Database of Bosch FSM-2500 Server and Bosch FSM-5000 Server

    CriticalCVSS 10.0No exploitEPSS 3%

    bosch · fsm-2500 firmwareJan 26, 2021

  • CVE-2020-6770
    40Plan

    Deserialization of Untrusted Data in Bosch BVMS Mobile Video Service

    CriticalCVSS 9.8No exploitEPSS 3%

    bosch · bosch video management system mobile video serviceFeb 7, 2020

  • CVE-2022-32534
    40Plan

    OS Command Injection

    CriticalCVSS 9.8No exploitEPSS 2%

    bosch · pra-es8p2s firmwareJun 23, 2022

  • CVE-2018-19036
    40Plan

    An issue was discovered in several Bosch IP cameras for firmware versions 6.32 and higher.

    CriticalCVSS 9.8No exploitEPSS 2%

    bosch · common product platform 4 firmwareDec 17, 2018

  • CVE-2019-6957
    40Plan

    Buffer Overflow for Bosch Video Systems, PSIM and Access Control Systems

    CriticalCVSS 9.8No exploitEPSS 1%

    bosch · access professional editionMay 29, 2019

  • CVE-2018-20299
    40Plan

    An issue was discovered in several Bosch Smart Home cameras (360 degree indoor camera and Eyes outdoor camera) with firmware before 6.52.4.

    CriticalCVSS 9.8No exploitEPSS 1%

    bosch · 360-indoor camera firmwareDec 19, 2018

  • CVE-2021-23857
    39Monitor

    Login with hash: The login routine allows the client to log in to the system not by using the password, but by using the hash of the passwor

    CriticalCVSS 9.8No exploitEPSS 1%

    bosch · rexroth indramotion mlc l20 firmwareOct 4, 2021

  • CVE-2019-11898
    39Monitor

    Unauthorized APE administration privileges can be achieved by reverse engineering one of the APE service tools.

    CriticalCVSS 9.9No exploitEPSS 1%

    bosch · accessSep 12, 2019

  • CVE-2019-11684
    39Monitor

    Improper Access Control in Bosch Video Recording Manager

    CriticalCVSS 9.8No exploitEPSS 0%

    bosch · video recording managerFeb 26, 2021

  • CVE-2021-23853
    39Monitor

    Improper Input Validation of HTTP Headers

    CriticalCVSS 9.8No exploitEPSS 0%

    bosch · cpp4 firmwareJun 9, 2021

  • CVE-2022-32535
    39Monitor

    Web server runs as root

    CriticalCVSS 9.8No exploitEPSS 0%

    bosch · pra-es8p2s firmwareJun 23, 2022

  • CVE-2023-48266
    39Monitor

    The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Exe

    CriticalCVSS 9.8No exploitEPSS 0%

    bosch · nexo-osJan 10, 2024

  • CVE-2023-48264
    39Monitor

    The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Exe

    CriticalCVSS 9.8No exploitEPSS 0%

    bosch · nexo-osJan 10, 2024

  • CVE-2023-48265
    39Monitor

    The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Exe

    CriticalCVSS 9.8No exploitEPSS 0%

    bosch · nexo-osJan 10, 2024

  • CVE-2023-48263
    39Monitor

    The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Exe

    CriticalCVSS 9.8No exploitEPSS 0%

    bosch · nexo-osJan 10, 2024

  • CVE-2023-48262
    39Monitor

    The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Exe

    CriticalCVSS 9.8No exploitEPSS 0%

    bosch · nexo-osJan 10, 2024

  • CVE-2023-48245
    39Monitor

    The vulnerability allows an unauthenticated remote attacker to upload arbitrary files under the context of the application OS user (“root”)

    CriticalCVSS 9.8No exploitEPSS 0%

    bosch · nexo-osJan 10, 2024

  • CVE-2023-48250
    39Monitor

    The vulnerability allows a remote attacker to authenticate to the web application with high privileges through multiple hidden hard-coded ac

    CriticalCVSS 9.8No exploitEPSS 0%

    bosch · nexo-osJan 10, 2024

  • CVE-2023-48251
    39Monitor

    The vulnerability allows a remote attacker to authenticate to the SSH service with root privileges through a hidden hard-coded account.

    CriticalCVSS 9.8No exploitEPSS 0%

    bosch · nexo-osJan 10, 2024

  • CVE-2020-6769
    37Monitor

    Missing Authentication for Critical Function in Bosch Video Streaming Gateway

    CriticalCVSS 9.1No exploitEPSS 2%

    bosch · video streaming gatewayFeb 7, 2020

  • CVE-2019-6958
    36Monitor

    Improper Access Control for Bosch Video Systems, PSIM and Access Control Systems

    CriticalCVSS 9.1No exploitEPSS 1%

    bosch · access professional editionMay 29, 2019

  • CVE-2021-23847
    36Monitor

    Unauthenticated Information Extraction Vulnerability

    CriticalCVSS 9.1No exploitEPSS 1%

    bosch · cpp6 firmwareJun 9, 2021

  • CVE-2019-11897
    35Monitor

    Server-side request forgery in the backup & restore functionality of ProSyst mBS SDK and Bosch IoT Gateway Software

    HighCVSS 8.6No exploitEPSS 1%

    bosch · iot gateway softwareAug 21, 2019

  • CVE-2024-25002
    35Monitor

    Command Injection in the diagnostics interface of the Bosch Network Synchronizer allows unauthorized users full access to the device.

    HighCVSS 8.8No exploitEPSS 1%

    bosch · network synchronizer enterpriseMar 25, 2024

  • CVE-2023-48243
    35Monitor

    The vulnerability allows a remote attacker to upload arbitrary files in all paths of the system under the context of the application OS user

    HighCVSS 8.8No exploitEPSS 1%

    bosch · nexo-osJan 10, 2024