CVE-2022-36301: Bosch Bf-OS

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

BF-OS version 3.x up to and including 3.83 do not enforce strong passwords which may allow a remote attacker to brute-force the device password.

Affected products

• Bosch Bf-OS: from 3.0, up to and including 3.83

Published 2022-08-01. Last modified 2026-06-17.