Description
Use of Hard-coded Credentials in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows an unauthenticated remote attacker to log into the database with admin-privileges. This may result in complete compromise of the confidentiality and integrity of the stored data as well as a high availability impact on the database itself. In addition, an attacker may execute arbitrary commands on the underlying operating system.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Bosch | FSM-2500 | affected |
|
||||||
| Bosch | FSM-5000 | affected |
|
Configuration 1 [-]
| AND |
|
Configuration 2 [-]
| AND |
|
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2020-27926 | Use of Hard-coded Credentials in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows an unauthenticated remote attacker to log into the database with admin-privileges. This may result in complete compromise of the confidentiality and integrity of the stored data as well as a high availability impact on the database itself. In addition, an attacker may execute arbitrary commands on the underlying operating system. |
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: bosch
Published:
Updated: 2024-09-16T22:30:56.636Z
Reserved: 2020-01-10T00:00:00.000Z
Link: CVE-2020-6779
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-01-26T18:16:07.803
Modified: 2024-11-21T05:36:10.500
Link: CVE-2020-6779
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses