Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Bosch AMS, BIS 4.0, 4.9.1 Clear all filters
TI-2021-06207 CVE-2021-23843 · GHSA-mw72-7m3m-vvm2

Lack of authentication mechanisms on the device

Priority LOW 38

The Bosch software tools AccessIPConfig.exe and AmcIpConfig.exe are used to configure certains settings in AMC2 devices.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00241 Published 2022-01-19 Fixed in 4.0, 4.9.1 CWE-306
TI-2021-06206 CVE-2021-23842 · GHSA-j6hr-vmm6-m6c2

Use of Hard-coded Cryptographic Key

Priority LOW 30

Communication to the AMC2 uses a state-of-the-art cryptographic algorithm for symmetric encryption called Blowfish.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00144 Published 2022-01-19 Fixed in 4.0, 4.9.1 CWE-321