Approved changes feed: RSS · Atom

cpe:2.3:a:bosch:bsh_elp_(electronic_platform)_modules:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBosch (fd8ddba2-7d59-56e9-89d8-6fcadc94214e)
ProductBsh Elp (Electronic Platform) Modules (2fa97704-50d6-51b6-9aaa-a773ba013964)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-56428 vulnerable 2026-09-16 04:33:34.808530 Details available
HIGH (8.1)
The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly secured default configuration. An insecure, non-revocable SSH public key is included in the firmware's authorized_keys file for the root user. An attacker in possession of the corresponding private key could leverage it to bypass authentication and gain root-level access to the appliance.
Published: 2026-07-30T13:11:11.395Z
Updated: 2026-07-30T15:10:44.082Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.