Skip to content
Bosch vulnerabilities
Products
Show 120 moreShow less
Newest
-
bosch bvms
Information disclosure in BVMS 4.5 up to 12.3
CVE-2026-10764
8.7 High
-
bosch bsh elp (electronic platform) modules
The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific...
CVE-2026-56428
8.1 High
-
bosch camera firmware
A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an...
CVE-2024-58330
7.5 High
-
bosch configuration manager
Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to...
CVE-2024-58023
8.4 High
-
bosch divar ip 7000 r2, divar ip all-in-one 5000, divar ip all-in-one 7000 +5 more +7 more
Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1
allows...
CVE-2024-33618
7.5 High
-
bosch rexroth indraworks, bosch rexroth indraworks +1 more
A vulnerability has been identified in Rexroth IndraWorks. This flaw allows an attacker to...
CVE-2025-60038
7.8 High
-
bosch rexroth indraworks, bosch rexroth indraworks +1 more
A vulnerability has been identified in Rexroth IndraWorks. This flaw allows an attacker to...
CVE-2025-60037
7.8 High
-
bosch rexroth indraworks, bosch rexroth indraworks, ua.testclient +1 more +3 more
A vulnerability has been identified in the UA.Testclient utility, which is included in Rexroth...
CVE-2025-60036
7.8 High
-
bosch rexroth indraworks, bosch rexroth indraworks +1 more
A vulnerability has been identified in the OPC.Testclient utility, which is included in Rexroth...
CVE-2025-60035
7.8 High
-
bosch infotainment system ecu
Enabling SSH server on Infotainment ECU
CVE-2025-32063
6.8 Medium
-
bosch infotainment system ecu
Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU
CVE-2025-32062
8.8 High
-
bosch infotainment system ecu
Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU
CVE-2025-32061
8.8 High
-
bosch infotainment system ecu
Absence of Kernel Module Signature Verification on Linux System of Infotainment ECU
CVE-2025-32060
6.7 Medium
-
bosch infotainment system ecu
Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU
CVE-2025-32059
8.8 High
-
bosch infotainment system ecu
Stack Overflow in processing requests over INC interface on RH850 side of Infotainment ECU
CVE-2025-32058
9.3 Critical
-
bosch infotainment system ecu
Misconfigured SSL/TLS communication of Redbend service for Infotainment ECU
CVE-2025-32057
6.5 Medium
-
bosch infotainment system ecu
Anti-Theft Bypass for Infotainment ECU
CVE-2025-32056
4.0 Medium
-
bosch ams, bis +1 more
A firmware bug which may lead to misinterpretation of data in the AMC2-4WCF and AMC2-2WCF...
CVE-2023-32228
4.6 Medium
-
bosch network synchronizer, network synchronizer enterprise, network synchronizer standard +2 more
Command Injection in the diagnostics interface of the Bosch Network Synchronizer allows...
CVE-2024-25002
8.8 High
-
bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 more
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS)...
CVE-2023-48266
8.1 High
-
bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 more
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS)...
CVE-2023-48265
8.1 High
-
bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 more
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS)...
CVE-2023-48264
8.1 High
-
bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 more
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS)...
CVE-2023-48263
8.1 High
-
bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 more
The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS)...
CVE-2023-48262
8.1 High
-
bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 more
The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the...
CVE-2023-48261
5.3 Medium
-
bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 more
The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the...
CVE-2023-48260
5.3 Medium
-
bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 more
The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the...
CVE-2023-48259
5.3 Medium
-
bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 more
The vulnerability allows a remote attacker to delete arbitrary files on the file system via a...
CVE-2023-48258
5.5 Medium
-
bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 more
The vulnerability allows a remote attacker to access sensitive data inside exported packages or...
CVE-2023-48257
7.8 High
-
bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 more
The vulnerability allows a remote attacker to inject arbitrary HTTP response headers or...
CVE-2023-48256
5.3 Medium
-
bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 more
The vulnerability allows an unauthenticated remote attacker to send malicious network requests...
CVE-2023-48255
6.3 Medium
-
bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 more
The vulnerability allows a remote attacker to inject and execute arbitrary client-side script...
CVE-2023-48254
5.3 Medium
-
bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 more
The vulnerability allows a remote authenticated attacker to read or update arbitrary content of...
CVE-2023-48253
8.8 High
-
bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 more
The vulnerability allows an authenticated remote attacker to perform actions exceeding their...
CVE-2023-48252
8.8 High
-
bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 more
The vulnerability allows a remote attacker to authenticate to the SSH service with root...
CVE-2023-48251
8.1 High
-
bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 more
The vulnerability allows a remote attacker to authenticate to the web application with high...
CVE-2023-48250
8.1 High
-
bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 more
The vulnerability allows an authenticated remote attacker to list arbitrary folders in all paths...
CVE-2023-48249
6.5 Medium
-
bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 more
The vulnerability allows an authenticated remote attacker to upload a malicious file to the SD...
CVE-2023-48248
5.5 Medium
-
bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 more
The vulnerability allows an unauthenticated remote attacker to read arbitrary files under the...
CVE-2023-48247
5.3 Medium
-
bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 more
The vulnerability allows a remote attacker to download arbitrary files in all paths of the system...
CVE-2023-48246
6.5 Medium
-
bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 more
The vulnerability allows an unauthenticated remote attacker to upload arbitrary files under the...
CVE-2023-48245
6.5 Medium
-
bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 more
The vulnerability allows a remote attacker to inject and execute arbitrary client-side script...
CVE-2023-48244
5.3 Medium
-
bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 more
The vulnerability allows a remote attacker to upload arbitrary files in all paths of the system...
CVE-2023-48243
8.1 High
-
bosch nexo-os, rexroth nexo cordless nutrunner nxa011s-36v (0608842011), nexo cordless nutrunner nxa011s-36v-b (0608842012) +18 more +20 more
The vulnerability allows an authenticated remote attacker to download arbitrary files in all...
CVE-2023-48242
6.5 Medium
-
bosch bcc101, bcc102, bcc50 +3 more +5 more
Network port 8899 open in WiFi firmware of BCC101/BCC102/BCC50 products, that allows an attacker...
CVE-2023-49722
8.3 High
-
bosch camera firmware, cpp13 firmware, cpp14 firmware +4 more +6 more
An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an...
CVE-2022-41677
5.3 Medium
-
bosch onvif camera event driver tool, bis video engine, video management system +21 more +23 more
An improper handling of a malformed API answer packets to API clients in Bosch BT software...
CVE-2023-35867
5.9 Medium
-
bosch monitor wall, monitorwall, video recording manager +5 more +7 more
An improper handling of a malformed API request to an API server in Bosch BT software products...
CVE-2023-32230
7.5 High
-
bosch camera firmware, cpp13 firmware, cpp14 firmware +2 more
A command injection vulnerability exists in Bosch IP cameras that allows an authenticated user...
CVE-2023-39509
7.2 High
-
bosch rts vlink virtual matrix, rts vlink virtual matrix software +1 more
A command injection vulnerability exists in RTS VLink Virtual Matrix Software Versions v5 (< 5.7...
CVE-2023-34999
8.4 High
- Show olderLoading…