What is CVE-2020-6780?

CVE-2020-6780 is a medium-severity vulnerability in Bosch Fsm-2500, classified under Use of Password Hash With Insufficient Computational Effort. CVSS score: 4.4/10. Published 2021-01-26.

How severe is CVE-2020-6780?

Medium severity. CVSS v3 base score is 4.4 out of 10.

Vulnerability in Bosch Fsm-2500

CVE-2020-6780

Use of Password Hash With Insufficient Computational Effort in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows a remote attacker with admin privileges to dump the credentials of other…

EPSS: 0.006 (42.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.4 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N.

Affected products

Bosch Fsm-2500 — versions unspecified
Bosch Fsm-2500_firmware
Bosch Fsm-5000 — versions unspecified
Bosch Fsm-5000_firmware

Weakness classification (CWE)

CWE-916 — Use of Password Hash With Insufficient Computational Effort

References

psirt@bosch.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-6780?: CVE-2020-6780 is a medium-severity vulnerability in Bosch Fsm-2500, classified under Use of Password Hash With Insufficient Computational Effort. CVSS score: 4.4/10. Published 2021-01-26.
How severe is CVE-2020-6780?: Medium severity. CVSS v3 base score is 4.4 out of 10.