PT-2026-66471 · Bosch · Bsh Elp (Electronic Platform) Modules

CVE-2026-56428 · Publicado 2026-07-30 · Atualizado 2026-07-30

Mitre

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly secured default configuration. An insecure, non-revocable SSH public key is included in the firmware's authorized keys file for the root user. An attacker in possession of the corresponding private key could leverage it to bypass authentication and gain root-level access to the appliance.

Correção

Enumeração de Fraquezas

CWE-286

Identificadores relacionados

CVE-2026-56428

Produtos afetados

Bsh Elp (Electronic Platform) Modules

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-56428 · Nota de Segurança
• https://psirt.bosch.com/security-advisories/BOSCH-SA-943700.html · Aviso do Fabricante