CVE-2023-29241

CVSS 8.1v3.1pub. 2023-06-30upd. 2024-11-21

Improper Information in Cybersecurity Guidebook in Bosch Building Integration System (BIS) 5.0 may lead to wrong configuration which allows local users to access data via network

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Bosch Building Integration System
APP
Bosch
5.0

🔵

CHECK WITH VENDOR

No clear patch data available. Check vendor references.

CWE

CWE-1112

NVD-CWE-Other

References

psirt.bosch.com/security-advisories/BOSCH-SA-988400-BT.…

Related vulnerabilities

CVE-2021-23859CRITICAL9.1ten sam produkt

An unauthenticated attacker is able to send a special HTTP request, that causes a service to crash. In case of...

CVE-2019-6957CRITICAL9.8ten sam produkt

A recently discovered security vulnerability affects all Bosch Video Management System (BVMS) versions 9.0 and...

CVE-2019-6958CRITICAL9.1ten sam produkt

A recently discovered security vulnerability affects all Bosch Video Management System (BVMS) versions 9.0 and...

CVE-2021-23843HIGH8.8ten sam produkt

The Bosch software tools AccessIPConfig.exe and AmcIpConfig.exe are used to configure certains settings in AMC...

CVE-2021-23842MEDIUM5.7ten sam produkt

Communication to the AMC2 uses a state-of-the-art cryptographic algorithm for symmetric encryption called Blow...