Unrated severityNVD Advisory· Published Jun 18, 2021· Updated Sep 16, 2024
B426 Credential Disclosure
CVE-2021-23846
Description
When using http protocol, the user password is transmitted as a clear text parameter for which it is possible to be obtained by an attacker through a MITM attack. This will be fixed starting from Firmware version 3.11.5, which will be released on the 30th of June, 2021.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: < 3.11.5
- Range: 03.01.0004
Patches
Vulnerability mechanics
References
1- psirt.bosch.com/security-advisories/bosch-sa-196933-bt.htmlmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.