Advisories · Technology

Bosch BIS.

Every CVE that names Bosch BIS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-32228 CVE record

CVSS 4.6 Medium

A firmware bug which may lead to misinterpretation of data in the AMC2-4WCF and AMC2-2WCF allowing an adversary to grant access to the last authorized user.
- Bosch AMS
- Bosch BIS
- CWE-115
Not analysed yet 11 Apr 2024
CVE-2023-29241 CVE record

CVSS 8.1 High

Bosch BIS: Improper Information in Cybersecurity Guidebook in Bosch Building Integration System…
- Bosch BIS
- CWE-1112
Not analysed yet 30 Jun 2023
CVE-2021-23843 CVE record

CVSS 8.8 High

Lack of authentication mechanisms on the device
- Bosch AMS
- Bosch APE
- Authentication bypass
Not analysed yet 19 Jan 2022
CVE-2021-23842 CVE record

CVSS 5.7 Medium

Use of Hard-coded Cryptographic Key
- Bosch AMS
- Bosch APE
- Hard-coded credentials
Not analysed yet 19 Jan 2022
CVE-2021-23859 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Denial of Service and Authentication Bypass Vulnerability in multiple Bosch products
- Bosch BVMS
- Bosch DIVAR IP 7000 R2
- CWE-703
Not analysed yet 8 Dec 2021