CVE-2023-29241: High severity bosch building integration system vulnerability

Published Jun 30, 2023

Updated

Improper Information in Cybersecurity Guidebook in Bosch Building Integration System (BIS) 5.0 may lead to wrong configuration which allows local users to access data via network

Affected Software

1 affected component

Bosch Building Integration System=5.0

Event History

Jun 30, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2023-29241?

CVE-2023-29241 is a vulnerability in Bosch Building Integration System (BIS) 5.0 that allows local users to access data via network due to an improper configuration.

How severe is CVE-2023-29241?

CVE-2023-29241 has a severity rating of 7.1, which is considered high.

How does CVE-2023-29241 occur?

CVE-2023-29241 occurs due to improper information in the cybersecurity guidebook of Bosch Building Integration System (BIS) 5.0, leading to wrong configuration settings.

What software is affected by CVE-2023-29241?

Bosch Building Integration System (BIS) version 5.0 is affected by CVE-2023-29241.

Where can I find more information about CVE-2023-29241?

You can find more information about CVE-2023-29241 at the following reference link: [Bosch Security Advisory - BOSCH-SA-988400-BT](https://psirt.bosch.com/security-advisories/BOSCH-SA-988400-BT.html)