Vulnerabilities > Bosch > Critical
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-01-10 | CVE-2023-48251 | Use of Hard-coded Credentials vulnerability in Bosch Nexo-Os 1000/1500Sp2 The vulnerability allows a remote attacker to authenticate to the SSH service with root privileges through a hidden hard-coded account. | 9.8 |
| 2024-01-10 | CVE-2023-48262 | Out-of-bounds Write vulnerability in Bosch Nexo-Os 1000/1500Sp2 The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request. | 9.8 |
| 2024-01-10 | CVE-2023-48263 | Out-of-bounds Write vulnerability in Bosch Nexo-Os 1000/1500Sp2 The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request. | 9.8 |
| 2024-01-10 | CVE-2023-48264 | Out-of-bounds Write vulnerability in Bosch Nexo-Os 1000/1500Sp2 The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request. | 9.8 |
| 2024-01-10 | CVE-2023-48265 | Out-of-bounds Write vulnerability in Bosch Nexo-Os 1000/1500Sp2 The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request. | 9.8 |
| 2024-01-10 | CVE-2023-48266 | Out-of-bounds Write vulnerability in Bosch Nexo-Os 1000/1500Sp2 The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network request. | 9.8 |
| 2024-01-10 | CVE-2023-48245 | Missing Authorization vulnerability in Bosch Nexo-Os 1000/1500Sp2 The vulnerability allows an unauthenticated remote attacker to upload arbitrary files under the context of the application OS user (“root”) via a crafted HTTP request. | 9.8 |
| 2024-01-10 | CVE-2023-48250 | Use of Hard-coded Credentials vulnerability in Bosch Nexo-Os 1000/1500Sp2 The vulnerability allows a remote attacker to authenticate to the web application with high privileges through multiple hidden hard-coded accounts. | 9.8 |
| 2022-06-23 | CVE-2022-32534 | OS Command Injection vulnerability in Bosch Pra-Es8P2S Firmware 1.01.05 The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 and earlier was found to be vulnerable to command injection through its diagnostics web interface. | 9.8 |
| 2022-06-23 | CVE-2022-32535 | Improper Privilege Management vulnerability in Bosch Pra-Es8P2S Firmware 1.01.05 The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 runs its web server with root privilege. | 9.8 |