bosch

Latest CVEs · RSS

• CVE-2026-42808 2026-09-10 · CVSS 6.8
  An issue was discovered in Bosch Sensortec COINES_SDK versions 2.0 through 2.11.  The host streaming API function fails
• CVE-2026-42807 2026-09-10 · CVSS 8.0
  A heap-based buffer overflow vulnerability in the PC bridge protocol decoder of BoschSensortec COINES_SDK (versions 2.10 through 2.12.2) allows attackers to cau
• CVE-2026-42806 2026-09-10 · CVSS 4.3
  An out-of-bounds read vulnerability was discovered in the Bosch BME690 SensorAPI (C-driver) in version v1.0.3 and prior, specifically within the field data pars
• CVE-2026-42805 2026-09-10 · CVSS 8.4
  A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI385 SensorAPI (C library) within the debug message parser function bhi385_parse_deb
• CVE-2026-42804 2026-09-10 · CVSS 7.6
  A stack-based buffer overflow vulnerability exists in the Bosch Sensortec BHI360 SensorAPI(C-Library) in versions up to and including commit d6b200416a. The
• CVE-2026-56428 2026-07-30 · CVSS 8.1
  The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly secured default configuration. An insec
• CVE-2024-58330 2026-07-23 · CVSS 7.5
  A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytics event data.
• CVE-2024-58023 2026-07-23 · CVSS 8.4
  Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to access sensitive information.
• CVE-2024-33618 2026-04-15 · CVSS 7.5
  Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1 allows attackers to consume excessive amounts of disk space via network inte
• CVE-2025-60038 2026-02-18 · CVSS 7.8
  A vulnerability has been identified in Rexroth IndraWorks. This flaw allows an attacker to execute arbitrary code on the user's system by parsing a manipulated
• CVE-2025-60037 2026-02-18 · CVSS 7.8
  A vulnerability has been identified in Rexroth IndraWorks. This flaw allows an attacker to execute arbitrary code on the user's system by parsing a manipulated
• CVE-2025-60036 2026-02-18 · CVSS 7.8
  A vulnerability has been identified in the UA.Testclient utility, which is included in Rexroth IndraWorks. All versions prior to 15V24 are affected. This flaw a
• CVE-2025-60035 2026-02-18 · CVSS 7.8
  A vulnerability has been identified in the OPC.Testclient utility, which is included in Rexroth IndraWorks. All versions prior to 15V24 are affected. This flaw
• CVE-2025-48862 2025-08-14 · CVSS 7.1
  Ambiguous wording in the web interface of the ctrlX OS setup mechanism could lead the user to believe that the backup file is encrypted when a password is set.
• CVE-2025-48861 2025-08-14 · CVSS 5.3
  A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote, unauthenticated attacker to access and extract internal application d
• CVE-2025-48860 2025-08-14 · CVSS 8.0
  A vulnerability in the web application of the ctrlX OS setup mechanism facilitated an authenticated (low privileged) attacker to gain remote access to backup ar
• CVE-2025-29902 2025-06-13 · CVSS 10.0
  Remote code execution that allows unauthorized users to execute arbitrary code on the server machine.
• CVE-2025-27532 2025-04-30 · CVSS 6.5
  A vulnerability in the “Backup & Restore” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to access secr
• CVE-2025-24351 2025-04-30 · CVSS 8.8
  A vulnerability in the “Remote Logging” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to execute arbi
• CVE-2025-24350 2025-04-30 · CVSS 7.1
  A vulnerability in the “Certificates and Keys” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to write
• CVE-2025-24349 2025-04-30 · CVSS 7.1
  A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to delete th
• CVE-2025-24348 2025-04-30 · CVSS 5.4
  A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to manipula
• CVE-2025-24347 2025-04-30 · CVSS 6.5
  A vulnerability in the “Network Interfaces” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to manipula
• CVE-2025-24346 2025-04-30 · CVSS 7.5
  A vulnerability in the “Proxy” functionality of the web application of ctrlX OS allows a remote authenticated (lowprivileged) attacker to manipulate the “/etc/e
• CVE-2025-24345 2025-04-30 · CVSS 6.3
  A vulnerability in the “Hosts” functionality of the web application of ctrlX OS allows a remote authenticated (low-privileged) attacker to manipulate the “hosts