Bosch Vulnerabilities and Affected Products
Vulnerabilities associated with BSH ELP (Electronic Platform) Modules.
Products
Clear product- BVMS9 vulnerabilities
- DIVAR IP all-in-one 50009 vulnerabilities
- CPP Firmware8 vulnerabilities
- Infotainment system ECU8 vulnerabilities
- BVMS Viewer6 vulnerabilities
- DIVAR IP 7000 R26 vulnerabilities
- DIVAR IP all-in-one 70006 vulnerabilities
- Smart Home Controller6 vulnerabilities
- BIS5 vulnerabilities
- Camera Firmware4 vulnerabilities
- DIVAR IP 30004 vulnerabilities
- DIVAR IP 70004 vulnerabilities
- VRM4 vulnerabilities
- AMS3 vulnerabilities
- APE3 vulnerabilities
- DIVAR IP all-in-one 40003 vulnerabilities
- DIVAR IP all-in-one 60003 vulnerabilities
- PRA-ES8P2S3 vulnerabilities
- Video Streaming Gateway3 vulnerabilities
- VJD-75133 vulnerabilities
- Access Professional Edition2 vulnerabilities
- AMC22 vulnerabilities
- BF-OS2 vulnerabilities
- Bosch DIVAR IP 7000 R22 vulnerabilities
- Bosch DIVAR IP all-in-one 50002 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-56428HIGH | Generated title:BSH ELP Modules Default SSH Key Authentication BypassThe SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly secured default configuration. An insecure, non-revocable SSH public key is included in the firmware's authorized_keys file for the root user. An attacker in possession of the corresponding private key could leverage it to bypass authentication and gain root-level access to the appliance. CWE-286Jul 30, 2026 | CVSS8.1v3.1 | EPSS0.284% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |