Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2021-23846

B426 Credential Disclosure

When using http protocol, the user password is transmitted as a clear text parameter for which it is possible to be obtained by an attacker through a MITM attack. This will be fixed starting from Firmware version 3.11.5, which will be released on the 30th of June, 2021.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Bosch
Products
B426 B426 Firmware
CVE-2021-23845

B426 Web Configuration Authentication Bypass

This vulnerability could allow an attacker to hijack a session while a user is logged in the configuration web page. This vulnerability was discovered by a security researcher in B426 and found during internal product tests in B426-CN/B429-CN, and B426-M and has been fixed already starting from version 3.08 on, which was released on June 2019.

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed
Vendors
Bosch
Products
B426 B426-cn B426-cn Firmware and 5 more