Bosch B426
Approved changes feed: RSS · Atom
cpe:2.3:h:bosch:b426:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Bosch (fd8ddba2-7d59-56e9-89d8-6fcadc94214e) |
|---|---|
| Product | B426 (27a44a2e-fb8f-56a6-b6e1-f8f29db34a2c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-23846 |
not_vulnerable | 2026-06-08 05:30:03.149997 |
B426 Credential Disclosure
HIGH (8.8)
When using http protocol, the user password is transmitted as a clear text parameter for which it is possible to be obtained by an attacker through a MITM attack. This will be fixed starting from Firmware version 3.11.5, which will be released on the 30th of June, 2021.
Published: 2021-06-18T13:38:38.275Z
Updated: 2024-09-16T16:38:12.268Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23845 |
not_vulnerable | 2026-06-08 05:30:03.142033 |
B426 Web Configuration Authentication Bypass
HIGH (8)
This vulnerability could allow an attacker to hijack a session while a user is logged in the configuration web page. This vulnerability was discovered by a security researcher in B426 and found during internal product tests in B426-CN/B429-CN, and B426-M and has been fixed already starting from version 3.08 on, which was released on June 2019.
Published: 2021-06-18T13:38:31.304Z
Updated: 2024-09-16T21:57:38.685Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.