CVE Vulnerabilities

CVE-2023-29241

Incomplete Documentation of Program Execution

Published: Jun 30, 2023 | Modified: Nov 21, 2024
CVSS 3.x
7.1
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Improper Information in Cybersecurity Guidebook in Bosch Building Integration System (BIS) 5.0 may lead to wrong configuration which allows local users to access data via network

Weakness

The document does not fully define all mechanisms that are used to control or influence how product-specific programs are executed.

Affected Software

NameVendorStart VersionEnd Version
Building_integration_systemBosch5.0 (including)5.0 (including)

Extended Description

This includes environmental variables, configuration files, registry keys, command-line switches or options, or system settings.

References