PT-2021-15561

Name of the Vulnerable Software and Affected Versions: Bosch B426 versions prior to 3.08 Description: This issue allows an attacker to hijack a session while a user is logged in to the configuration web page. It was discovered by a security researcher and found during internal product tests in...

Bosch B426 Web Configuration Use of Hard-coded Password Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Bosch B426. Authentication is not required to exploit this vulnerability. The specific flaw exists within the lgs.cgi module. This issue results from the use of hard-coded session token. An attacker c...

Bosch B426 Web Configuration Credential Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Bosch B426. User interaction is required to exploit this vulnerability. The specific flaw exists within the handling of login credentials provided to the login.cgi endpoint. The iss...

PT-2021-15562

Name of the Vulnerable Software and Affected Versions: Bosch B426 versions prior to 3.11.5 Description: The issue allows an attacker to obtain user passwords through a Man-In-The-Middle MITM attack when using the http protocol, as passwords are transmitted as clear text parameters. Recommendation...

Bosch B426 安全漏洞

Bosch B426 is a firmware from Bosch Germany. A security vulnerability exists in Bosch B426 that allows network-adjacent attackers to disclose sensitive information about an affected Bosch B426 installation...