Bosch vulnerabilities
73 published CVEs name Bosch among the affected products.
- Published CVEs
- 73
- Last 12 months
- 12
- Critical
- 9
- Known exploited
- 0
Critical 9High 40Medium 24Low 0Not scored 0
CVEs per yearBy the year they were published
- 20199
- 202116
- 202117
- 202310
- 20248
- 20261
- 20268
- 20264
Newest CVEs
- CVE-2026-56428
The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly secured default configuration. An…
Bosch · BSH ELP (Electronic Platform) Modules
High8.1 - CVE-2024-58330
A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytics event data.
Bosch · Camera Firmware
High7.5 - CVE-2024-58023
Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to access sensitive information.
Bosch · Bosch Configuration Manager
High8.4 - CVE-2024-33618
Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1 allows attackers to consume excessive amounts of disk space via network…
Bosch · BVMS
High7.5 - CVE-2025-32063
Enabling SSH server on Infotainment ECU
Bosch · Infotainment system ECU
Medium6.8 - CVE-2025-32062
Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU
Bosch · Infotainment system ECU
High8.8 - CVE-2025-32061
Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU
Bosch · Infotainment system ECU
High8.8 - CVE-2025-32060
Absence of Kernel Module Signature Verification on Linux System of Infotainment ECU
Bosch · Infotainment system ECU
Medium6.7 - CVE-2025-32059
Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU
Bosch · Infotainment system ECU
High8.8 - CVE-2025-32058
Stack Overflow in processing requests over INC interface on RH850 side of Infotainment ECU
Bosch · Infotainment system ECU
Critical9.3
Products with the most CVEs
Most common weaknesses
- CWE-284 Improper access control10
- CWE-427 Uncontrolled search path element7
- CWE-121 Stack-based buffer overflow6
- CWE-79 Cross-site scripting (XSS)6
- CWE-269 Improper privilege management5
- CWE-20 Improper input validation4
- CWE-306 Missing authentication for a critical function4
- CWE-400 Uncontrolled resource consumption3
- CWE-703 3
- CWE-78 OS command injection3