Vulnerability in Bosch Access Management System
CVE-2021-23842
Communication to the AMC2 uses a state-of-the-art cryptographic algorithm for symmetric encryption called Blowfish. An attacker could retrieve the key from the firmware to decrypt network traffic between the AMC2 and the host system. Thus, an attacker can exploit this vulnerability to decrypt and modify network traffic, decrypt and further investigate the device\'s firmware file, and change the device configuration. The attacker needs to have access to the local network, typically even the same subnet.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 5.7 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N.
EPSS exploit prediction
EPSS: 0.001 (3.1th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 3rd percentile — 3.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.001 · newest: 0.001 · change: 0.000
Affected products
- Bosch Access Management System — versions 3.0
- Bosch Access Professional Edition
- Bosch Amc2 — versions all
- Bosch Amc2 Firmware
- Bosch Ams — versions unspecified
- Bosch Ape — versions unspecified
- Bosch Bis — versions unspecified
- Bosch Building Integration System
Weakness classification (CWE)
References
- psirt.bosch.com/security-advisories/BOSCH-SA-940448-BT.html (Mitigation, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-23842?
- CVE-2021-23842 is a medium-severity vulnerability in Bosch Access Management System, classified under Use of Hard-coded Cryptographic Key. CVSS score: 5.7/10. Published 2022-01-19.
- How severe is CVE-2021-23842?
- Medium severity. CVSS v3 base score is 5.7 out of 10.