CVE-2023-49722

—

CVSS 3.1

6.5 medium

EPSS

<1%p37

Published

Jan 9, 2024 (Jan 9, 2024)

Modified

Jun 17, 2026

Description

Network port 8899 open in WiFi firmware of BCC101/BCC102/BCC50 products, that allows an attacker to connect to the device via same WiFi network.

Vendors: bosch
Products: bcc101 firmware, bcc102 firmware, bcc50 firmware
Weakness: CWE-1125
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news4 stories

High-Severity Flaws Uncovered in Bosch Thermostats and Smart Nutrunners

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2024Ransomware CVE-2023-49722

60

Experts warn of a vulnerability affecting Bosch BCC100 Thermostat

Security AffairsJan 16, 06:20 UTC · Jan 16, 2024Vulnerability CVE-2023-49722

47

Vulnerability affecting smart thermostats patched by Bosch

The RecordJan 12, 20:19 UTC · Jan 12, 2024Vulnerability CVE-2023-49722

47

Vulnerability Puts Bosch Smart Thermostats at Risk of Compromise

Infosecurity MagazineJan 12, 10:00 UTC · Jan 12, 2024Vulnerability CVE-2023-49722

35