Bosch PSIRT Security Advisories
Information about security vulnerabilities affecting Bosch products.
2026
| Security Advisory ID | Assigned CVE IDs | CVSS Score* | Affected Bosch Products | Title | Publication Date | Last Update |
|---|---|---|---|---|---|---|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
7.8
|
Affected Bosch Products
|
Title
Vulnerabilities in Rexroth IndraWorks
|
Publication Date
2026-02-13
|
Last Update
2026-02-27
|
2025
| Security Advisory ID | Assigned CVE IDs | CVSS Score* | Affected Bosch Products | Title | Publication Date | Last Update |
|---|---|---|---|---|---|---|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
5.9
|
Affected Bosch Products
|
Title
Multiple vulnerabilities in MAP intrusion panel
|
Publication Date
2025-11-19
|
Last Update
2025-11-19
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
7.4
|
Affected Bosch Products
|
Title
Weak Diffie-Hellman in TLS protocol
|
Publication Date
2025-11-19
|
Last Update
2025-11-19
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
8.1
|
Affected Bosch Products
|
Title
OpenSSH DoS due to signal handler race condition
|
Publication Date
2025-11-19
|
Last Update
2025-11-19
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
7.4
|
Affected Bosch Products
|
Title
Deprecated SSH cryptographic settings
|
Publication Date
2025-11-19
|
Last Update
2025-11-19
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
8.0
|
Affected Bosch Products
|
Title
Vulnerabilities in ctrlX OS - Setup
|
Publication Date
2025-08-14
|
Last Update
2025-08-14
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
7.5
|
Affected Bosch Products
|
Title
Denial of Service on Rexroth Fieldbus Couplers
|
Publication Date
2025-08-14
|
Last Update
2025-08-14
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
10.0
|
Affected Bosch Products
|
Title
Remote Code Execution in Telex RDC Server and RTS VLink Virtual Matrix
|
Publication Date
2025-06-10
|
Last Update
2025-06-10
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
8.8
|
Affected Bosch Products
|
Title
Multiple ctrlX OS vulnerabilities
|
Publication Date
2025-04-25
|
Last Update
2025-04-25
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
7.8
|
Affected Bosch Products
|
Title
Unquoted Service Path Enumeration on SMCWatchDog Agent
|
Publication Date
2025-01-15
|
Last Update
2025-01-15
|
2024
| Security Advisory ID | Assigned CVE IDs | CVSS Score* | Affected Bosch Products | Title | Publication Date | Last Update |
|---|---|---|---|---|---|---|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
7.5
|
Affected Bosch Products
|
Title
DoS vulnerability on IndraDrive
|
Publication Date
2024-10-31
|
Last Update
2024-10-31
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
7.5
|
Affected Bosch Products
|
Title
Unrestricted resource consumption in BVMS
|
Publication Date
2024-10-16
|
Last Update
2024-10-16
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
9.8
|
Affected Bosch Products
|
Title
Multiple vulnerabilites in libexpat affecting PRC7000
|
Publication Date
2024-10-02
|
Last Update
2024-10-02
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
8.4
|
Affected Bosch Products
|
Title
Sensitive information disclosure in Bosch Configuration Manager
|
Publication Date
2024-10-01
|
Last Update
2024-10-01
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
7.5
|
Affected Bosch Products
|
Title
Unauthenticated information leak in Bosch IP cameras
|
Publication Date
2024-08-21
|
Last Update
2024-08-21
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
8.6
|
Affected Bosch Products
|
Title
Multiple Curl vulnerabilities in the Git for Windows component of Bosch DIVAR IP all-in-one Devices
|
Publication Date
2024-08-07
|
Last Update
2024-08-07
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
8.1
|
Affected Bosch Products
|
Title
"regreSSHion" OpenSSH vulnerability in PRC7000
|
Publication Date
2024-07-19
|
Last Update
2024-07-19
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
6.5
|
Affected Bosch Products
|
Title
TI Bluetooth stack can fail to generate a resolvable Random Private Address (RPA) leading to DoS for already bonded peer devices
|
Publication Date
2024-05-28
|
Last Update
2024-05-31
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
9.8
|
Affected Bosch Products
|
Title
Remote code execution vulnerability has been found over an insecure connection in the Praesensa Logging Application, Praesideo Logging Application and Praesideo PC Call Station
|
Publication Date
2024-05-15
|
Last Update
2024-05-15
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
8.8
|
Affected Bosch Products
|
Title
Command Injection in Bosch Network Synchronizer
|
Publication Date
2024-03-20
|
Last Update
2024-04-24
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
7.3
|
Affected Bosch Products
|
Title
RPS and RPS-LITE operator and communication process vulnerabilities.
|
Publication Date
2024-03-13
|
Last Update
2024-03-13
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
7.8
|
Affected Bosch Products
|
Title
BVMS affected by Autodesk Design Review Multiple Vulnerabilities
|
Publication Date
2024-03-13
|
Last Update
2024-03-13
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
9.8
|
Affected Bosch Products
|
Title
Multiple OpenSSL vulnerabilities in BVMS
|
Publication Date
2024-03-06
|
Last Update
2024-03-06
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
9.8
|
Affected Bosch Products
|
Title
Git for Windows Multiple Security Vulnerabilities in Bosch DIVAR IP all-in-one Devices
|
Publication Date
2024-03-06
|
Last Update
2024-03-06
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
8.3
|
Affected Bosch Products
|
Title
Open Port 8899 in BCC Thermostat Product
|
Publication Date
2024-01-09
|
Last Update
2024-01-09
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
8.8
|
Affected Bosch Products
|
Title
Multiple vulnerabilities in Nexo cordless nutrunner
|
Publication Date
2024-01-08
|
Last Update
2024-01-29
|
2023
| Security Advisory ID | Assigned CVE IDs | CVSS Score* | Affected Bosch Products | Title | Publication Date | Last Update |
|---|---|---|---|---|---|---|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
7.2
|
Affected Bosch Products
|
Title
Command injection vulnerability in Bosch IP Cameras
|
Publication Date
2023-12-13
|
Last Update
2023-12-13
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
7.5
|
Affected Bosch Products
|
Title
Denial of Service vulnerability in Bosch BT software products
|
Publication Date
2023-12-13
|
Last Update
2023-12-13
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
8.8
|
Affected Bosch Products
|
Title
Vulnerability in SICK Flexi Soft Gateway
|
Publication Date
2023-10-24
|
Last Update
2023-10-24
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
8.8
|
Affected Bosch Products
|
Title
Multiple vulnerabilities on ctrlX HMI / WR21
|
Publication Date
2023-10-20
|
Last Update
2023-11-21
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
8.4
|
Affected Bosch Products
|
Title
Remote Code Execution in RTS VLink Virtual Matrix
|
Publication Date
2023-08-30
|
Last Update
2023-08-30
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
9.8
|
Affected Bosch Products
|
Title
Multiple Vulnerabilities PRA-ES8P2S Ethernet-Switch
|
Publication Date
2023-07-26
|
Last Update
2023-07-26
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
7.5
|
Affected Bosch Products
|
Title
Vulnerability in the interface module SLC-0-GPNT00300
|
Publication Date
2023-07-04
|
Last Update
2023-07-04
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
5.9
|
Affected Bosch Products
|
Title
Security Advisory for the FL MGUARD family of devices
|
Publication Date
2023-07-04
|
Last Update
2023-07-04
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
8.1
|
Affected Bosch Products
|
Title
Update in Cybersecurity Guidebook of BIS on Permission Settings for Network Share
|
Publication Date
2023-06-28
|
Last Update
2023-06-28
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
5.3
|
Affected Bosch Products
|
Title
Information Disclosure Vulnerability in Bosch IP cameras
|
Publication Date
2023-06-28
|
Last Update
2023-12-13
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
4.9
|
Affected Bosch Products
|
Title
Possible damage of secure element in Bosch IP cameras
|
Publication Date
2023-05-31
|
Last Update
2023-05-31
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
9.8
|
Affected Bosch Products
|
Title
.NET Remote Code Execution Vulnerability in BVMS, BIS and AMS
|
Publication Date
2023-05-24
|
Last Update
2023-05-24
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
4.6
|
Affected Bosch Products
|
Title
Vulnerability in Wiegand card data interpretation
|
Publication Date
2023-05-24
|
Last Update
2023-05-24
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
7.1
|
Affected Bosch Products
|
Title
Unrestricted SSH port forwarding in BVMS
|
Publication Date
2023-05-24
|
Last Update
2023-05-24
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
9.8
|
Affected Bosch Products
|
Title
Use of Telnet in the interface module SLC-0-GPNT00300
|
Publication Date
2023-04-28
|
Last Update
2023-04-28
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
7.6
|
Affected Bosch Products
|
Title
Insecure authentication in B420 legacy communication module
|
Publication Date
2023-04-26
|
Last Update
2023-04-26
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
7.5
|
Affected Bosch Products
|
Title
Vulnerability in routers FL MGUARD and TC MGUARD
|
Publication Date
2023-03-03
|
Last Update
2023-03-03
|
2022
| Security Advisory ID | Assigned CVE IDs |
CVSS Score* |
Affected Products | Title |
Publication Date |
Last Update |
|---|---|---|---|---|---|---|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
9.8
|
Affected Products
|
Title
Multiple Vulnerabilities PRA-ES8P2S Ethernet-Switch
|
Publication Date
2022-11-23
|
Last Update
2023-06-28
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
5.8
|
Affected Products
|
Title
Multiple Cross Site Scripting vulnerabilities in Bosch VIDEOJET multi 4000
|
Publication Date
2022-10-19
|
Last Update
2023-01-18
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
9.8
|
Affected Products
|
Title
Multiple Vulnerabilities in NetApp DSA E2800 series
|
Publication Date
2022-10-19
|
Last Update
2022-12-07
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
7.4
|
Affected Products
|
Title
Information Disclosure in VIDEOJET Decoder and Operator Client application in BVMS
|
Publication Date
2022-09-21
|
Last Update
2022-09-21
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
7.8
|
Affected Products
|
Title
SafeLogic Designer vulnerabilities
|
Publication Date
2022-08-11
|
Last Update
2022-08-11
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
9.8
|
Affected Products
|
Title
Multiple Vulnerabilities in BF-OS
|
Publication Date
2022-08-01
|
Last Update
2022-11-03
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
9.8
|
Affected Products
|
Title
Multiple Vulnerabilities PRA-ES8P2S Ethernet-Switch
|
Publication Date
2022-06-22
|
Last Update
2023-02-08
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
8.1
|
Affected Products
|
Title
Vulnerabilities in the communication protocol of the PLC runtime
|
Publication Date
2022-05-02
|
Last Update
2022-10-11
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
7.5
|
Affected Products
|
Title
Vulnerability in routers FL MGUARD and TC MGUARD
|
Publication Date
2022-04-27
|
Last Update
2022-04-27
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
9.8
|
Affected Products
|
Title
Improper Control of Generation of Code in Bosch MATRIX
|
Publication Date
2022-04-27
|
Last Update
2022-04-27
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
9.8
|
Affected Products
|
Title
Multiple ctrlX CORE vulnerabilities
|
Publication Date
2022-04-20
|
Last Update
2022-04-20
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
6.8
|
Affected Products
|
Title
Buffer Overflow Vulnerability in Recovery Image
|
Publication Date
2022-03-30
|
Last Update
2022-09-07
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
9.8
|
Affected Products
|
Title
Bosch Fire Monitoring System (FSM) affected by log4net Vulnerability
|
Publication Date
2022-03-23
|
Last Update
2024-07-03
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
9.8
|
Affected Products
|
Title
Improper Restriction of XML External Entity Reference in BVMS
|
Publication Date
2022-03-16
|
Last Update
2022-03-16
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
6.1
|
Affected Products
|
Title
Injection of arbitrary HTML code in Bosch Video Security Android App
|
Publication Date
2022-01-26
|
Last Update
2022-09-07
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
8.8
|
Affected Products
|
Title
Multiple vulnerabilities in Bosch AMC2 (Access Modular Controller)
|
Publication Date
2022-01-19
|
Last Update
2022-01-28
|
2021
| Security Advisory ID | Assigned CVE IDs |
CVSS Score* |
Affected Products | Title |
Publication Date |
Last Update |
|---|---|---|---|---|---|---|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
10.0
|
Affected Products
|
Title
Log4j Vulnerabilities - Impact on PRAESENSA Advanced Public Address Server (PRA-APAS)
|
Publication Date
2021-12-22
|
Last Update
2021-12-22
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
9.0
|
Affected Products
|
Title
Apache Log4j Vulnerabilities - Impact on Bosch Rexroth Products
|
Publication Date
2021-12-21
|
Last Update
2022-01-10
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
9.1
|
Affected Products
|
Title
Multiple Vulnerabilities in Bosch BT software products
|
Publication Date
2021-12-08
|
Last Update
2021-12-08
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
10.0
|
Affected Products
|
Title
Multiple vulnerabilities in Rexroth IndraMotion and IndraLogic series
|
Publication Date
2021-10-04
|
Last Update
2022-08-25
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
7.5
|
Affected Products
|
Title
Cross Site Request Forgery (CSRF) vulnerability in Bosch IP cameras
|
Publication Date
2021-08-04
|
Last Update
2021-10-07
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
9.8
|
Affected Products
|
Title
Vulnerabilities in CODESYS V2 runtime systems
|
Publication Date
2021-07-20
|
Last Update
2021-07-20
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
9.8
|
Affected Products
|
Title
Vulnerabilities in CODESYS V2 runtime systems
|
Publication Date
2021-07-09
|
Last Update
2021-07-09
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
9.8
|
Affected Products
|
Title
Multiple vulnerabilities in Bosch IP cameras
|
Publication Date
2021-06-09
|
Last Update
2021-06-09
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
8.8
|
Affected Products
|
Title
Several Vulnerabilities in Bosch B426, B426-CN/B429-CN, and B426-M
|
Publication Date
2021-05-28
|
Last Update
2023-02-03
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
7.3
|
Affected Products
|
Title
Vulnerability in the routing protocol of the PLC runtime
|
Publication Date
2021-05-19
|
Last Update
2021-05-19
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
9.8
|
Affected Products
|
Title
ctrlX CORE - IDE App affected by OpenSSL and Python Vulnerabilities
|
Publication Date
2021-04-30
|
Last Update
2021-04-30
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
n/a
|
Affected Products
|
Title
FTP Backdoor for Rexroth Fieldbus Couplers S20 and Inline
|
Publication Date
2021-04-30
|
Last Update
2021-04-30
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
9.1
|
Affected Products
|
Title
ctrlX Multiple Vulnerabilities
|
Publication Date
2021-04-23
|
Last Update
2021-04-23
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
7.5
|
Affected Products
|
Title
Denial of Service in Rexroth ActiveMover using EtherNet/IP protocol
|
Publication Date
2021-03-31
|
Last Update
2021-03-31
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
7.5
|
Affected Products
|
Title
Denial of Service in Rexroth ActiveMover using Profinet protocol
|
Publication Date
2021-03-31
|
Last Update
2022-01-26
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
7.8
|
Affected Products
|
Title
Uncontrolled Search Path Element in Multiple Bosch Products
|
Publication Date
2021-03-24
|
Last Update
2021-03-30
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
4.2
|
Affected Products
|
Title
Side Channel Key Extraction Vulnerability in Bosch IP Cameras and Encoders
|
Publication Date
2021-03-03
|
Last Update
2021-03-03
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
7.8
|
Affected Products
|
Title
Privilege Escalation via sudo and Linux kernel in Bosch Rexroth Products
|
Publication Date
2021-02-24
|
Last Update
2021-02-24
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
9.8
|
Affected Products
|
Title
Denial of Service in Rexroth ID 200/C-ETH using EtherNet/IP Protocol
|
Publication Date
2021-01-27
|
Last Update
2021-01-27
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
10
|
Affected Products
|
Title
Two Vulnerabilities in Bosch Fire Monitoring System (FSM)
|
Publication Date
2021-01-20
|
Last Update
2024-07-03
|
2020
| Security Advisory ID | Assigned CVE IDs |
CVSS Score* |
Affected Products | Title |
Publication Date |
Last Update |
|---|---|---|---|---|---|---|
| Security Advisory ID |
Assigned CVE IDs
CVE-2020-1971
|
CVSS Score*
5.9
|
Affected Products
|
Title
ctrlX Products affected by OpenSSL Vulnerability CVE-2020-1971
|
Publication Date
2020-12-18
|
Last Update
2021-01-21
|
| Security Advisory ID |
Assigned CVE IDs
CVE-2019-5105
CVE-2020-7052 |
CVSS Score*
7.5
|
Affected Products
|
Title
Denial of Service in PLC Runtime affecting Rexroth IndraMotion Products
|
Publication Date
2020-12-16
|
Last Update
2020-12-16
|
| Security Advisory ID |
Assigned CVE IDs
CVE-2019-18858
CVE-2019-5105 CVE-2019-9010 CVE-2019-9012 CVE-2019-9013 CVE-2020-10245 |
CVSS Score*
10.0
|
Affected Products
|
Title
Multiple Vulnerabilities in 3S CODESYS Runtime in Rexroth PRC7000
|
Publication Date
2020-12-16
|
Last Update
2020-12-16
|
| Security Advisory ID |
Assigned CVE IDs
CVE-2019-0708
|
CVSS Score*
9.8
|
Affected Products
|
Title
Remote Desktop Services Remote Code Execution Vulnerability in Rexroth Industrial PCs
|
Publication Date
2020-10-13
|
Last Update
2020-10-13
|
| Security Advisory ID |
Assigned CVE IDs
CVE-2020-6776
CVE-2020-6777 CVE-2020-15688 |
CVSS Score*
8.8
|
Affected Products
|
Title
Vulnerabilities in Bosch PRAESIDEO and PRAESENSA
|
Publication Date
2020-09-30
|
Last Update
2020-09-30
|
| Security Advisory ID |
Assigned CVE IDs
CVE-2020-14513
CVE-2020-14519 CVE-2020-14509 CVE-2020-14517 CVE-2020-16233 CVE-2020-14515 |
CVSS Score*
10.0
|
Affected Products
|
Title
WIBU Systems CodeMeter Runtime Vulnerabilities in Rexroth Products
|
Publication Date
2020-09-25
|
Last Update
2020-09-25
|
| Security Advisory ID |
Assigned CVE IDs
CVE-2020-6781
|
CVSS Score*
6.8
|
Affected Products
|
Title
Improper Certificate Validation in Bosch Smart Home System App for iOS
|
Publication Date
2020-08-25
|
Last Update
2020-08-25
|
| Security Advisory ID |
Assigned CVE IDs
CVE-2017-0144
CVE-2019-0708 CVE-2020-6774 |
CVSS Score*
9.8
|
Affected Products
|
Title
Multiple Vulnerabilities in Bosch Recording Station (BRS)
|
Publication Date
2020-05-27
|
Last Update
2020-05-27
|
| Security Advisory ID |
Assigned CVE IDs
CVE-2018-16994
|
CVSS Score*
7.5
|
Affected Products
|
Title
Denial of Service in Rexroth Fieldbus Coupler S20-PN-BK+/S20-ETH-BK
|
Publication Date
2020-03-16
|
Last Update
2020-03-16
|
| Security Advisory ID |
Assigned CVE IDs
CVE-2020-6770
|
CVSS Score*
10.0
|
Affected Products
|
Title
Deserialization of Untrusted Data in Bosch BVMS Mobile Video Service
|
Publication Date
2020-01-29
|
Last Update
2020-01-29
|
| Security Advisory ID |
Assigned CVE IDs
CVE-2020-6769
|
CVSS Score*
10.0
|
Affected Products
|
Title
Missing Authentication for Critical Function in Bosch Video Streaming Gateway
|
Publication Date
2020-01-29
|
Last Update
2020-01-29
|
| Security Advisory ID |
Assigned CVE IDs
CVE-2020-6768
|
CVSS Score*
8.6
|
Affected Products
|
Title
Path Traversal in Bosch Video Management System NoTouch deployment
|
Publication Date
2020-01-29
|
Last Update
2020-02-11
|
| Security Advisory ID |
Assigned CVE IDs
CVE-2020-6767
|
CVSS Score*
7.7
|
Affected Products
|
Title
Path Traversal in Bosch Video Management System
|
Publication Date
2020-01-29
|
Last Update
2020-02-11
|
2019
| Security Advisory ID | Assigned CVE IDs |
CVSS Score* |
Affected Products | Title |
Publication Date |
Last Update |
|---|---|---|---|---|---|---|
| Security Advisory ID |
Assigned CVE IDs
CVE-2019-11899
|
CVSS Score*
8.8
|
Affected Products
Bosch Access Professional Edition
|
Title
Improper Access Control in Access Professional Edition 3.7 downwards
|
Publication Date
2019-09-11
|
Last Update
2019-09-11
|
| Security Advisory ID |
Assigned CVE IDs
CVE-2019-11898
|
CVSS Score*
9.9
|
Affected Products
Bosch Access Professional Edition
|
Title
Hard-coded Credentials in Access Professional Edition 3.7 downwards
|
Publication Date
2019-09-11
|
Last Update
2019-09-11
|
| Security Advisory ID |
Assigned CVE IDs
CVE-2019-1181
CVE-2019-1182 |
CVSS Score*
9.8
|
Affected Products
|
Title
Vulnerability for Windows Remote Desktop Services (RDP) Remote Code Execution
|
Publication Date
2019-09-03
|
Last Update
2019-09-03
|
| Security Advisory ID |
Assigned CVE IDs
CVE-2019-11601 CVE-2019-11897
CVE-2019-11602 CVE-2019-11603 |
CVSS Score*
9.1
|
Affected Products
|
Title
Multiple Vulnerabilities in ProSyst mBS SDK and Bosch IoT Gateway Software
|
Publication Date
2019-08-19
|
Last Update
2020-03-16
|
| Security Advisory ID |
Assigned CVE IDs
CVE-2019-12256
CVE-2019-12257 CVE-2019-12255 CVE-2019-12260 CVE-2019-12261 CVE-2019-12263 CVE-2019-12258 CVE-2019-12259 CVE-2019-12262 CVE-2019-12264 CVE-2019-12265 |
CVSS Score*
9.8
|
Affected Products
|
Title
VxWorks security updates in Bosch Rexroth controllers
|
Publication Date
2019-08-08
|
Last Update
2019-08-08
|
| Security Advisory ID |
Assigned CVE IDs
CVE-2019-0708
|
CVSS Score*
9.8
|
Affected Products
|
Title
Vulnerability for Windows Remote Desktop Services (RDP) Remote Code Execution
|
Publication Date
2019-06-12
|
Last Update
2019-06-12
|
| Security Advisory ID |
Assigned CVE IDs
CVE-2019-11601
CVE-2019-11602 CVE-2019-11603 CVE-2019-11891 CVE-2019-11892 CVE-2019-11893 CVE-2019-11894 CVE-2019-11895 CVE-2019-11896 CVE-2019-11897 |
CVSS Score*
9.1
|
Affected Products
Bosch Smart Home Controller
|
Title
Multiple Vulnerabilities in Bosch Smart Home Controller
|
Publication Date
2019-05-29
|
Last Update
2019-05-29
|
| Security Advisory ID |
Assigned CVE IDs
CVE-2019-11684
|
CVSS Score*
9.9
|
Affected Products
Bosch Video Recording Manager
|
Title
Unauthenticated Certificate Access in Video Recording Manager
|
Publication Date
2019-05-09
|
Last Update
2022-02-10
|
| Security Advisory ID |
Assigned CVE IDs
CVE-2019-6958
|
CVSS Score*
9.8
|
Affected Products
|
Title
Improper Access Control in Bosch Security Systems Software for Video, PSIM and Access Control Systems
|
Publication Date
2019-04-03
|
Last Update
2019-04-03
|
| Security Advisory ID |
Assigned CVE IDs
CVE-2019-6957
|
CVSS Score*
9.8
|
Affected Products
|
Title
Buffer Overflow in Bosch Security Systems Software for Video, PSIM and Access
|
Publication Date
2019-04-03
|
Last Update
2019-04-03
|
| Security Advisory ID |
Assigned CVE IDs
CVE-2019-8952
|
CVSS Score*
4.9
|
Affected Products
Hardware:
Software:
|
Title
Path Traversal Vulnerability in Video Recording Manager
|
Publication Date
2019-04-03
|
Last Update
2019-04-03
|
| Security Advisory ID |
Assigned CVE IDs
CVE-2019-8951
|
CVSS Score*
6.1
|
Affected Products
Hardware:
Software:
|
Title
Open Redirect Vulnerability in Video Recording Manager
|
Publication Date
2019-04-03
|
Last Update
2019-04-03
|
| Security Advisory ID |
Assigned CVE IDs
CVE-2019-7729
|
CVSS Score*
4.8
|
Affected Products
Smart Camera App for Android < 1.3.1
|
Title
Insecure Permissions in Smart Camera App for Android
|
Publication Date
2019-02-22
|
Last Update
2019-02-22
|
| Security Advisory ID |
Assigned CVE IDs
CVE-2019-7728
|
CVSS Score*
8.3
|
Affected Products
Smart Camera App for Android < 1.3.1
|
Title
Improper Certificate Validation in Smart Camera App for Android
|
Publication Date
2019-02-22
|
Last Update
2019-02-22
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
9.8
|
Affected Products
|
Title
Bosch Rexroth IndraWorks Operation (WinStudio) Security Advisory
|
Publication Date
2019-02-18
|
Last Update
2019-02-18
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
10
|
Affected Products
Bosch digital recorder DVR 400 & 600 series
|
Title
DIVAR 400 & 600 series Vulnerability
|
Publication Date
2019-01-22
|
Last Update
2019-01-22
|
2018
| Security Advisory ID | Assigned CVE IDs |
CVSS Score* |
Affected Products | Title |
Publication Date |
Last Update |
|---|---|---|---|---|---|---|
| Security Advisory ID |
Assigned CVE IDs
CVE-2018-20299
|
CVSS Score*
9.4
|
Affected Products
|
Title
Bosch Smart Home Camera Vulnerability
|
Publication Date
2018-12-18
|
Last Update
2018-12-20
|
| Security Advisory ID |
Assigned CVE IDs
CVE-2018-19036
|
CVSS Score*
9.4
|
Affected Products
|
Title
Bosch IP Camera Vulnerability
|
Publication Date
2018-12-12
|
Last Update
2022-02-10
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
6.5
|
Affected Products
|
Title
Bosch Access Easy Controller 2.1
|
Publication Date
2018-12-03
|
Last Update
2018-12-03
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
9.8
|
Affected Products
|
Title
Bosch Rexroth IndraWorks Operation (WinStudio) Security Advisory
|
Publication Date
2018-11-27
|
Last Update
2018-11-27
|
2017
| Security Advisory ID | Assigned CVE IDs |
CVSS Score* |
Affected Products | Title |
Publication Date |
Last Update |
|---|---|---|---|---|---|---|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
6.5
|
Affected Products
Bosch Drivelog Connector
|
Title
Bosch Drivelog Connector
|
Publication Date
2017-04-13
|
Last Update
2017-04-13
|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
2.9
|
Affected Products
Bosch BMA222E
|
Title
Bosch BMA222E Acoustic Resonance Interference
|
Publication Date
2017-03-14
|
Last Update
2017-03-14
|
2016
| Security Advisory ID | Assigned CVE IDs |
CVSS Score* |
Affected Products | Title |
Publication Date |
Last Update |
|---|---|---|---|---|---|---|
| Security Advisory ID |
Assigned CVE IDs
|
CVSS Score*
6.4
|
Affected Products
Bosch Rexroth BLADEcontrol-WebVIS
|
Title
Bosch Rexroth BLADEcontrol-WebVIS
|
Publication Date
2016-07-22
|
Last Update
2017-03-14
|
Atom / RSS Feeds
Subscribe to our feed(s) to be notified about new Security Advisories.
Bosch PSIRT
The PSIRT is part of the Bosch CERT, further information can be found here in the RFC2350 document: RFC2350
Search our S/MIME key here
Fingerprint: 87:F1:6F:70:60:D2:94:83:82:AC:69:F5:46:86:7C:80:7F:86:1D:F0
Find our PGP Key here
Fingerprint: 0C19 7DE3 6D10 6637 CFDA DFC9 69A8 FAA2 DBBE 481F