Bosch vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-56428 The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly secured default configuration.High 8.1 · Jul 30, 2026
• CVE-2024-58330 A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytics event data.High 7.5 · Jul 23, 2026
• CVE-2024-58023 Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to access sensitive information.High 8.4 · Jul 23, 2026
• CVE-2024-33618 Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1 allows attackers to consume excessive amounts of disk space via network inteHigh 7.5 · Apr 15, 2026
• CVE-2025-32062 The specific flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU manufactured by Bosch.High 8.8 · Feb 15, 2026
• CVE-2025-32061 The specific flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU manufactured by Bosch.High 8.8 · Feb 15, 2026
• CVE-2025-32059 The specific flaw exists within the Bluetooth stack developed by Alps Alpine of the Infotainment ECU manufactured by Bosch.High 8.8 · Feb 15, 2026
• CVE-2025-32058 The Infotainment ECU manufactured by Bosch uses a RH850 module for CAN communication.Critical 9.3 · Feb 15, 2026
• CVE-2024-25002 Command Injection in the diagnostics interface of the Bosch Network Synchronizer allows unauthorized users full access to the device.High 8.8 · Mar 25, 2024
• CVE-2023-49722 Network port 8899 open in WiFi firmware of BCC101/BCC102/BCC50 products, that allows an attacker to connect to the device via same WiFi network.High 8.3 · Jan 9, 2024
• CVE-2023-39509 A command injection vulnerability exists in Bosch IP cameras that allows an authenticated user with administrative rights to run arbitrary commands on the OS ofHigh 7.2 · Dec 18, 2023
• CVE-2023-32230 An improper handling of a malformed API request to an API server in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of ServicHigh 7.5 · Dec 18, 2023
• CVE-2023-29241 Improper Information in Cybersecurity Guidebook in Bosch Building Integration System (BIS) 5.0 may lead to wrong configuration which allows local users to accesHigh 8.1 · Jun 30, 2023
• CVE-2023-28175 Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal neHigh 7.1 · Jun 15, 2023
• CVE-2022-47648 An Improper Access Control vulnerability allows an attacker to access the control panel of the B420 without requiring any sort of authorization or authenticatioHigh 7.6 · Feb 8, 2023
• CVE-2022-36302 File path manipulation vulnerability in BF-OS version 3.00 up to and including 3.83 allows an attacker to modify the file path to access different resources, whHigh 8.8 · Aug 1, 2022
• CVE-2022-36301 BF-OS version 3.x up to and including 3.83 do not enforce strong passwords which may allow a remote attacker to brute-force the device password.Critical 9.8 · Aug 1, 2022
• CVE-2022-32536 The user access rights validation in the web server of the Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 was insufficient.High 8.8 · Jun 23, 2022
• CVE-2022-32534 The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 and earlier was found to be vulnerable to command injection through its diagnostics web interHigh 8.8 · Jun 23, 2022
• CVE-2021-23843 The Bosch software tools AccessIPConfig.exe and AmcIpConfig.exe are used to configure certains settings in AMC2 devices.High 8.8 · Jan 19, 2022
• CVE-2021-23862 A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in system context.High 7.2 · Dec 8, 2021
• CVE-2021-23859 An unauthenticated attacker is able to send a special HTTP request, that causes a service to crash.Critical 9.1 · Dec 8, 2021
• CVE-2021-23849 A vulnerability in the web-based interface allows an unauthenticated remote attacker to trigger actions on an affected system on behalf of another user (CSRF - High 7.5 · Aug 5, 2021
• CVE-2021-23846 When using http protocol, the user password is transmitted as a clear text parameter for which it is possible to be obtained by an attacker through a MITM attacHigh 8.8 · Jun 18, 2021
• CVE-2021-23845 This vulnerability could allow an attacker to hijack a session while a user is logged in the configuration web page.High 8 · Jun 18, 2021