CVE-2022-32534

The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 and earlier was found to be vulnerable to command injection through its diagnostics web interface. This allows execution of shell commands...

CVE-2022-32536

The user access rights validation in the web server of the Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 was insufficient. This would allow a non-administrator user to obtain administrator user access rights...

CVE-2024-25002

Command Injection in the diagnostics interface of the Bosch Network Synchronizer allows unauthorized users full access to the device...

CVE-2024-48989

A vulnerability in the PROFINET stack implementation of the IndraDrive all versions of Bosch Rexroth allows an attacker to cause a denial of service, rendering the device unresponsive by sending arbitrary UDP messages...

CVE-2024-48989

A vulnerability in the PROFINET stack implementation of the IndraDrive all versions of Bosch Rexroth allows an attacker to cause a denial of service, rendering the device unresponsive by sending arbitrary UDP messages...

CVE-2024-48989

The CVE-2024-48989 affects Bosch Rexroth IndraDrive PROFINET stack (IndraDrive devices, all versions) with a vulnerability in the PROFINET stack that enables an attacker to cause a denial-of-service by sending arbitrary UDP messages, rendering the device unresponsive. Practical impact and exploit...

CVE-2024-48989

A vulnerability in the PROFINET stack implementation of the IndraDrive all versions of Bosch Rexroth allows an attacker to cause a denial of service, rendering the device unresponsive by sending arbitrary UDP messages...

CVE-2024-48989

A vulnerability in the PROFINET stack implementation of the IndraDrive all versions of Bosch Rexroth allows an attacker to cause a denial of service, rendering the device unresponsive by sending arbitrary UDP messages...

Bosch Rexroth IndraDrive 安全漏洞

Bosch Rexroth IndraDrive is a servo drive system from Bosch Rexroth that supports multiple protocols. A security vulnerability exists in Bosch Rexroth IndraDrive that originates from a flaw in the PROFINET stack implementation, which can be exploited by an attacker to send an arbitrary UDP messag...

SUSE CVE-2024-42086

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: bme680: Fix overflows in compensate functions There are cases in the compensate functions of the driver that there could be overflows of variables due to bit shifting ops. These implications were initially discusse...

DEBIAN-CVE-2024-42086

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: bme680: Fix overflows in compensate functions There are cases in the compensate functions of the driver that there could be overflows of variables due to bit shifting ops. These implications were initially discusse...

CVE-2024-42086 iio: chemical: bme680: Fix overflows in compensate() functions

In the Linux kernel, the following vulnerability has been resolved: iio: chemical: bme680: Fix overflows in compensate functions There are cases in the compensate functions of the driver that there could be overflows of variables due to bit shifting ops. These implications were initially discusse...

Bosch Ams和Bosch Bis 安全漏洞

Bosch Ams and Bosch Bis are both products of the German company Bosch.Bosch Ams is an access control system. Bosch Ams is an access control system for stand-alone applications or integration with other systems.Bosch Bis is a software solution. Bosch Bis is a software solution for managing differe...

CVE-2024-25002

Command Injection in the diagnostics interface of the Bosch Network Synchronizer allows unauthorized users full access to the device...

CVE-2024-25002

CVE-2024-25002 relates to a command injection in the Bosch Network Synchronizer diagnostics interface. The vulnerability allows unauthorized users to execute commands, potentially attaining full access to the device. Connected sources indicate affected versions are prior to 9.30, but exact vulner...

PT-2024-20692 · Bosch · Bosch Network Synchronizer

Name of the Vulnerable Software and Affected Versions: Bosch Network Synchronizer affected versions not specified Description: Command Injection in the diagnostics interface of the Bosch Network Synchronizer allows unauthorized users full access to the device. Recommendations: At the moment, ther...

Bosch Synchronizer 安全漏洞

Bosch Synchronizer is a network synchronizer from Bosch Germany. A security vulnerability exists in Bosch Synchronizer versions prior to 9.30 that stems from a command injection vulnerability...

Bosch Security Systems (CVE-2021-23845)

This vulnerability could allow an attacker to hijack a session while a user is logged in the configuration web page. This vulnerability was discovered by a security researcher in B426 and found during internal product tests in B426-CN/B429-CN, and B426-M and has been fixed already starting from...

Bosch Security Systems B426 Conettix Cleartext Transmission of Sensitive Information (CVE-2021-23846)

When using http protocol, the user password is transmitted as a clear text parameter for which it is possible to be obtained by an attacker through a MITM attack. This will be fixed starting from Firmware version 3.11.5, which will be released on the 30th of June, 2021. This plugin only works wit...

Bosch Security Systems Multiple Products Stack-based Buffer Overflow (CVE-2021-23851)

A specially crafted TCP/IP packet may cause the camera recovery image web interface to crash. It may also cause a buffer overflow which could enable remote code execution. The recovery image can only be booted with administrative rights or with physical access to the camera and allows the upload ...