CVE-2020-6779: Hard-coded Credentials in the Database of Bosch FSM-2500 Server and Bosch FSM-5000 Server
Use of Hard-coded Credentials in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows an unauthenticated remote attacker to log into the database with admin-privileges. This may result in complete compromise of the confidentiality and integrity of the stored data as well as a high availability impact on the database itself. In addition, an attacker may execute arbitrary commands on the underlying operating system.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-6779?
CVE-2020-6779 is a vulnerability that allows an unauthenticated remote attacker to log into the database of Bosch FSM-2500 server and Bosch FSM-5000 server with admin privileges.
What is the severity of CVE-2020-6779?
CVE-2020-6779 has a severity level of critical (10/10).
How does CVE-2020-6779 impact the affected software?
CVE-2020-6779 may result in complete compromise of the confidentiality and integrity of the affected software.
How do I fix CVE-2020-6779?
To fix CVE-2020-6779, update the Bosch FSM-2500 server and Bosch FSM-5000 server firmware to version 5.3 or later.
Where can I find more information about CVE-2020-6779?
You can find more information about CVE-2020-6779 at the following link: [Bosch Security Advisory](https://psirt.bosch.com/security-advisories/BOSCH-SA-332072-BT.html).