CVE-2020-6779 - Hard-coded Credentials in the Database of Bosch FSM-2500 Server and Bosch FSM-5000 Server · CoreCVE

Back Back to CVE browser

CRITICAL

Hard-coded Credentials in the Database of Bosch FSM-2500 Server and Bosch FSM-5000 Server

Published Jan 25, 2021

10.0

CRITICAL

CVSS 3.1

EPSS 3.70%

Description

Use of Hard-coded Credentials in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows an unauthenticated remote attacker to log into the database with admin-privileges. This may result in complete compromise of the confidentiality and integrity of the stored data as well as a high availability impact on the database itself. In addition, an attacker may execute arbitrary commands on the underlying operating system.

Affected products

Vendor Bosch Product n/a Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <=5.2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

n/a

Version	Status	Constraints
unspecified	affected	<=5.2

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-798

Hard-coded Credentials

References (1)

https://psirt.bosch.com/security-advisories/BOSCH-SA-332072-BT.html
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://psirt.bosch.com/security-advisories/BOSCH-SA-332072-BT.html		x_refsource_MISCVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner bosch

Published Jan 25, 2021

Updated Sep 16, 2024

Reserved Jan 10, 2020

Link CVE-2020-6779

CISA Vulnrichment

Updated n/a

Status Modified

Modified Jun 17, 2026

Link CVE-2020-6779

Severity n/a

Public date n/a

Links CVE-2020-6779