PT-2022-9430

CVE-2021-23843

·

Published

2022-01-19

·

Updated

2022-01-28

Description by

CVSS 3.1
8.8
High
MetricsAV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Bosch software tools AccessIPConfig.exe and AmcIpConfig.exe (affected versions not specified)
Description The Bosch software tools are used to configure settings in AMC2 devices and allow password protection to restrict access. However, an attacker can circumvent this protection, making unauthorized changes to configuration data or manipulating the device's configuration, potentially making it unresponsive in the local network. The attacker must have access to the local network, typically the same subnet.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾