Bosch vulnerabilities
73 CVEs and advisories name Bosch as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-56428The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly secured default con
- CVE-2024-58330A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytic
- CVE-2024-58023Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to access sensitive information.
- CVE-2024-33618Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1 allows attackers to consume excessive amounts of disk sp
- CVE-2025-32063Enabling SSH server on Infotainment ECU
- CVE-2025-32062Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU
- CVE-2025-32061Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU
- CVE-2025-32060Absence of Kernel Module Signature Verification on Linux System of Infotainment ECU
- CVE-2025-32059Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU
- CVE-2025-32058Stack Overflow in processing requests over INC interface on RH850 side of Infotainment ECU
- CVE-2025-32057Misconfigured SSL/TLS communication of Redbend service for Infotainment ECU
- CVE-2025-32056Anti-Theft Bypass for Infotainment ECU
- CVE-2023-32228A firmware bug which may lead to misinterpretation of data in the AMC2-4WCF and AMC2-2WCF allowing an adversary to grant access to the last
- CVE-2024-25002Command Injection in the diagnostics interface of the Bosch Network Synchronizer allows unauthorized users full access to the device.
- CVE-2023-49722Network port 8899 open in WiFi firmware of BCC101/BCC102/BCC50 products, that allows an attacker to connect to the device via same WiFi netw
- CVE-2022-41677An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve informati
- CVE-2023-35867An improper handling of a malformed API answer packets to API clients in Bosch BT software products can allow an unauthenticated attacker to
- CVE-2023-32230An improper handling of a malformed API request to an API server in Bosch BT software products can allow an unauthenticated attacker to caus
- CVE-2023-39509A command injection vulnerability exists in Bosch IP cameras that allows an authenticated user with administrative rights to run arbitrary c
- CVE-2023-29241Improper Information in Cybersecurity Guidebook in Bosch Building Integration System (BIS) 5.0 may lead to wrong configuration which allows
- CVE-2023-28175Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the
- CVE-2023-32229Due to an error in the software interface to the secure element chip on Bosch IP cameras of family CPP13 and CPP14, the chip can be permanen
- CVE-2022-47648An Improper Access Control vulnerability allows an attacker to access the control panel of the B420 without requiring any sort of authorizat
- CVE-2022-40184Stored Cross Site Scripting (XSS) in VIDEOJET multi 4000
- CVE-2022-40183Reflected Cross Site Scripting (XSS) in VIDEOJET multi 4000
- CVE-2022-32540Information Disclosure in Operator Client application in BVMS 10.1.1, 11.0 and 11.1.0 and VIDEOJET Decoder VJD-7513 versions 10.23 and 10.30
- CVE-2022-36302File path manipulation vulnerability in BF-OS version 3.00 up to and including 3.83 allows an attacker to modify the file path to access dif
- CVE-2022-36301BF-OS version 3.x up to and including 3.83 do not enforce strong passwords which may allow a remote attacker to brute-force the device passw
- CVE-2022-32536Privilege Escalation
- CVE-2022-32534OS Command Injection