by Kastro
Paper/Archive/CVE-2022-36301

CVE-2022-36301

Bosch BF-OS — BF-OS version 3.x up to and including 3.83 do not enforce strong passwords which may allow a remote attacker to brute-force the device pa…

EPSS 1.0%CVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 62.4.624 × 2012.5No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

BF-OS version 3.x up to and including 3.83 do not enforce strong passwords which may allow a remote attacker to brute-force the device password.

Affected

ProductAffectedFixed inSource
BF-OS3.0 – 3.83–CNA
BF-OS3.0 – 3.83–CNA
BF-OS3.0 – 3.83–CNA

Scores by source

bosch (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refpsirt.bosch.com/security-advisories/bosch-sa-013924-bt.html