Bosch b426 Firmware vulnerabilities

2 CVEs affecting Bosch b426 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-23846, published 2021-06-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-23845, published 2021-06-18. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. This vulnerability could allow an attacker to hijack a session while a user is logged in the configuration web page. This vulnerability was discovered by a security researcher in B426 and found…
CVE-2021-23846, published 2021-06-18. Medium severity, CVSS 5.9. EPSS: 0.5% chance of exploitation in the next 30 days. When using http protocol, the user password is transmitted as a clear text parameter for which it is possible to be obtained by an attacker through a MITM attack. This will be fixed starting from…