Approved changes feed: RSS · Atom

cpe:2.3:a:bosch:fsm-5000:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBosch (fd8ddba2-7d59-56e9-89d8-6fcadc94214e)
ProductFsm 5000 (46227b9e-d36c-528c-9a29-472a225f3d14)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-6780 vulnerable 2026-06-08 05:26:45.671206 Password Hash With Insufficient Computational Effort in the Database of Bosch FSM-2500 Server and Bosch FSM-5000 Server
MEDIUM (4.4)
Use of Password Hash With Insufficient Computational Effort in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows a remote attacker with admin privileges to dump the credentials of other users and possibly recover their plain-text passwords by brute-forcing the MD5 hash.
Published: 2021-01-25T18:41:41.783Z
Updated: 2024-09-17T01:11:14.207Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6779 vulnerable 2026-06-08 05:26:45.667888 Hard-coded Credentials in the Database of Bosch FSM-2500 Server and Bosch FSM-5000 Server
CRITICAL (10)
Use of Hard-coded Credentials in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows an unauthenticated remote attacker to log into the database with admin-privileges. This may result in complete compromise of the confidentiality and integrity of the stored data as well as a high availability impact on the database itself. In addition, an attacker may execute arbitrary commands on the underlying operating system.
Published: 2021-01-25T18:41:24.858Z
Updated: 2024-09-16T22:30:56.636Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.