Bosch AMC2 Firmware vulnerabilities

2 CVEs affecting Bosch AMC2 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-23843, published 2022-01-19.

More from Bosch.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-23843, published 2022-01-19. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. The Bosch software tools AccessIPConfig.exe and AmcIpConfig.exe are used to configure certains settings in AMC2 devices. The tool allows putting a password protection on configured devices to…
• CVE-2021-23842, published 2022-01-19. High severity, CVSS 7.1. EPSS: 0.1% chance of exploitation in the next 30 days. Communication to the AMC2 uses a state-of-the-art cryptographic algorithm for symmetric encryption called Blowfish. An attacker could retrieve the key from the firmware to decrypt network traffic…