CVE-2021-23843

creationtimestamp| type| source ---|---|--- 2022-01-20 00:40:48+00:00| seen| https://t.me/cibsecurity/35901...

CVE-2021-23843

The CVE-2021-23843 affects Bosch AMC2 devices via AccessIPConfig.exe and AmcIpConfig.exe, where password protection on the device configuration can be bypassed, allowing unauthorized changes to configuration data and potentially making the device unresponsive on the local network. The vulnerabili...

CVE-2021-23843 Lack of authentication mechanisms on the device

The Bosch software tools AccessIPConfig.exe and AmcIpConfig.exe are used to configure certains settings in AMC2 devices. The tool allows putting a password protection on configured devices to restrict access to the configuration of an AMC2. An attacker can circumvent this protection and make...