Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2026-56428

The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly secured default configuration. An insecure, non-revocable S

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
bosch

Description

The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly secured default configuration. An insecure, non-revocable SSH public key is included in the firmware's authorized_keys file for the root user. An attacker in possession of the corresponding private key could leverage it to bypass authentication and gain root-level access to the appliance.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bosch BSH ELP (Electronic Platform) Modules

  • 65.0.0 to < 65.2.12affected

References