Summaryinfo

A vulnerability was found in Bosch AMS and BIS. It has been classified as problematic. Affected is an unknown function. Performing a manipulation results in interpretation input. This vulnerability is identified as CVE-2023-32228. The attack may be carried out on the physical device. There is not any exploit available. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Detailsinfo

A vulnerability, which was classified as problematic, was found in Bosch AMS and BIS (unknown version). This affects an unknown code block. The manipulation with an unknown input leads to a interpretation input vulnerability. CWE is classifying the issue as CWE-115. The product misinterprets an input, whether from an attacker or another product, in a security-relevant fashion. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

A firmware bug which may lead to misinterpretation of data in the AMC2-4WCF and AMC2-2WCF allowing an adversary to grant access to the last authorized user.

It is possible to read the advisory at psirt.bosch.com. This vulnerability is uniquely identified as CVE-2023-32228 since 05/04/2023. The exploitability is told to be easy. Attacking locally is a requirement. No form of authentication is needed for exploitation. The technical details are unknown and an exploit is not publicly available.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• Bosch

Name

• AMS
• BIS

License

• commercial

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion