Fsm 2500 Firmware

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:bosch:fsm-2500_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorBosch (fd8ddba2-7d59-56e9-89d8-6fcadc94214e)
ProductFsm 2500 Firmware (700a55cd-807d-5af3-b09a-857cab4f46a9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-6780 vulnerable 2026-06-08 05:26:45.671319 Password Hash With Insufficient Computational Effort in the Database of Bosch FSM-2500 Server and Bosch FSM-5000 Server
MEDIUM (4.4)
Use of Password Hash With Insufficient Computational Effort in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows a remote attacker with admin privileges to dump the credentials of other users and possibly recover their plain-text passwords by brute-forcing the MD5 hash.
Published: 2021-01-25T18:41:41.783Z
Updated: 2024-09-17T01:11:14.207Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-6779 vulnerable 2026-06-08 05:26:45.668578 Hard-coded Credentials in the Database of Bosch FSM-2500 Server and Bosch FSM-5000 Server
CRITICAL (10)
Use of Hard-coded Credentials in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows an unauthenticated remote attacker to log into the database with admin-privileges. This may result in complete compromise of the confidentiality and integrity of the stored data as well as a high availability impact on the database itself. In addition, an attacker may execute arbitrary commands on the underlying operating system.
Published: 2021-01-25T18:41:24.858Z
Updated: 2024-09-16T22:30:56.636Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.