Summaryinfo

A vulnerability has been found in Bosch AMS and BIS and classified as problematic. This vulnerability affects unknown code. The manipulation leads to interpretation input. This vulnerability was named CVE-2023-32228. It is possible to launch the attack on the physical device. There is no exploit available. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Detailsinfo

A vulnerability, which was classified as problematic, was found in Bosch AMS and BIS (unknown version). This affects an unknown code block. The manipulation with an unknown input leads to a interpretation input vulnerability. CWE is classifying the issue as CWE-115. The product misinterprets an input, whether from an attacker or another product, in a security-relevant fashion. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

A firmware bug which may lead to misinterpretation of data in the AMC2-4WCF and AMC2-2WCF allowing an adversary to grant access to the last authorized user.

It is possible to read the advisory at psirt.bosch.com. This vulnerability is uniquely identified as CVE-2023-32228 since 05/04/2023. The exploitability is told to be easy. Attacking locally is a requirement. No form of authentication is needed for exploitation. The technical details are unknown and an exploit is not publicly available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• Bosch

Name

• AMS
• BIS

License

• commercial

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion