1. Home
  2. CVE Database
  3. CVE-2023-29241
HIGH · 8.1

CVE-2023-29241

Improper Information in Cybersecurity Guidebook in Bosch Building Integration System (BIS) 5.0 may lead to wrong configuration which allows local users to access data via network

Vulnerability Description

Improper Information in Cybersecurity Guidebook in Bosch Building Integration System (BIS) 5.0 may lead to wrong configuration which allows local users to access data via network

CVSS Score

8.1

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
BoschBuilding Integration System5.0

Related Weaknesses (CWE)

CWE-1112

References

FAQ

What is CVE-2023-29241?

CVE-2023-29241 is a vulnerability with a CVSS score of 8.1 (HIGH). Improper Information in Cybersecurity Guidebook in Bosch Building Integration System (BIS) 5.0 may lead to wrong configuration which allows local users to access data via network

How severe is CVE-2023-29241?

CVE-2023-29241 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-29241?

Check the references section above for vendor advisories and patch information. Affected products include: Bosch Building Integration System.