CVE-2022-47648

CVE-2022-47648 affects the Bosch B420 Ethernet module. The issue is improper access control caused by IP-based authorization, allowing an attacker on the same network as a legitimate user to access the device’s control panel without authentication. The vulnerable firmware version cited is 02.02.0...

CVE-2022-47648

An Improper Access Control vulnerability allows an attacker to access the control panel of the B420 without requiring any sort of authorization or authentication due to the IP based authorization. If an authorized user has accessed a publicly available B420 product using valid credentials, an...