Building Integration System
CVE-2023-29241
HIGH
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Lifecycle Timeline
1DescriptionNVD
Improper Information in Cybersecurity Guidebook in Bosch Building Integration System (BIS) 5.0 may lead to wrong configuration which allows local users to access data via network
AnalysisAI
Improper Information in Cybersecurity Guidebook in Bosch Building Integration System (BIS) 5.0 may lead to wrong configuration which allows local users to access data via network. Rated high severity (CVSS 7.1), this vulnerability is low attack complexity. No vendor patch available.
Technical ContextAI
This vulnerability is classified under CWE-1112. Improper Information in Cybersecurity Guidebook in Bosch Building Integration System (BIS) 5.0 may lead to wrong configuration which allows local users to access data via network Affected products include: Bosch Building Integration System.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.
More in Building Integration System
View allA recently discovered security vulnerability affects all Bosch Video Management System (BVMS) versions 9.0 and below, DI
A recently discovered security vulnerability affects all Bosch Video Management System (BVMS) versions 9.0 and below, DI
An unauthenticated attacker is able to send a special HTTP request, that causes a service to crash. Rated high severity
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today