← Back

B426 Firmware

b426_firmware

Vendor: Bosch • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-23846
1Bosch
1B426 Firmware
Jun 17, 2026
Jun 18, 2021
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
When using http protocol, the user password is transmitted as a clear text parameter for which it is possible to be obtained by an attacker through a MITM attack. This will be fixed starting from Firmware version 3.11.5,...Show more
When using http protocol, the user password is transmitted as a clear text parameter for which it is possible to be obtained by an attacker through a MITM attack. This will be fixed starting from Firmware version 3.11.5, which will be released on the 30th of June, 2021.Show less
CVE-2021-23845
1Bosch
4B426 Cn Firmware
B426 M FirmwareB426 Firmware+1 more
Jun 17, 2026
Jun 18, 2021
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
This vulnerability could allow an attacker to hijack a session while a user is logged in the configuration web page. This vulnerability was discovered by a security researcher in B426 and found during internal product te...Show more
This vulnerability could allow an attacker to hijack a session while a user is logged in the configuration web page. This vulnerability was discovered by a security researcher in B426 and found during internal product tests in B426-CN/B429-CN, and B426-M and has been fixed already starting from version 3.08 on, which was released on June 2019.Show less