CVE-2023-49722

CVE-2023-49722 affects Bosch BCC101/BCC102/BCC50 WiFi thermostats with an open debug port 8899 in the WiFi firmware, enabling an unauthenticated connection from the same WiFi network. Bosch’s advisory indicates the issue stems from this open port and that firmware version 4.13.33 closes the port ...