High severity · published Jan 19, 2022
CVE-2021-23842
Communication to the AMC2 uses a state-of-the-art cryptographic algorithm for symmetric encryption called Blowfish
7.1
CVSS
0.1%
EPSS
No
On KEV
Description
Communication to the AMC2 uses a state-of-the-art cryptographic algorithm for symmetric encryption called Blowfish. An attacker could retrieve the key from the firmware to decrypt network traffic between the AMC2 and the host system. Thus, an attacker can exploit this vulnerability to decrypt and modify network traffic, decrypt and further investigate the device\'s firmware file, and change the device configuration. The attacker needs to have access to the local network, typically even the same subnet.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 4% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AM
Access Management System · Bosch
3.0 · source: NVD
AP
Access Professional Edition · Bosch
through 3.8.0 · source: NVD
AF
Amc2 Firmware · Bosch
All versions, or not specified · source: NVD
BI
Building Integration System · Bosch
before 4.9.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-23842
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-23842
Mitigation
https://psirt.bosch.com/security-advisories/BOSCH-SA-940448-BT.html
More from Access Management System
7.8
CVE-2021-23843
The Bosch software tools AccessIPConfig.exe and AmcIpConfig.exe are used to configure certains settings in AMC2 devices
