Bosch Fsm-2500 Firmware vulnerabilities

2 CVEs affecting Bosch Fsm-2500 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-6780, published 2021-01-26.

More from Bosch.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-6779, published 2021-01-26. Critical severity, CVSS 10.0. EPSS: 3.7% chance of exploitation in the next 30 days. Use of Hard-coded Credentials in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows an unauthenticated remote attacker to log into the database…
• CVE-2020-6780, published 2021-01-26. Medium severity, CVSS 4.9. EPSS: 0.6% chance of exploitation in the next 30 days. Use of Password Hash With Insufficient Computational Effort in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows a remote attacker with admin…