Bosch BIS

• CVE-2023-32228 Medium 4.6 A firmware bug which may lead to misinterpretation of data in the AMC2-4WCF and AMC2-2WCF allowing an adversary to grant access to the last authorized user. 0.2%
• CVE-2023-29241 High 8.1 Improper Information in Cybersecurity Guidebook in Bosch Building Integration System (BIS) 5.0 may lead to wrong configuration which allows local users to access data via network 0.4%
• CVE-2021-23843 High 8.8 Lack of authentication mechanisms on the device 0.2%
• CVE-2021-23842 Medium 5.7 Use of Hard-coded Cryptographic Key 0.1%
• CVE-2021-23859 Critical 9.1 Denial of Service and Authentication Bypass Vulnerability in multiple Bosch products 1.0%