CVE-2023-49722

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-01-09 · updated 2026-06-17
Weakness: CWE-1125

Description

Network port 8899 open in WiFi firmware of BCC101/BCC102/BCC50 products, that allows an attacker to connect to the device via same WiFi network.

Affected products

Bosch Bcc101 Firmware: from 4.13.20 before 4.13.33 — fixed in 4.13.33
Bosch Bcc102 Firmware: from 4.13.20 before 4.13.33 — fixed in 4.13.33
Bosch Bcc50 Firmware: from 4.13.20 before 4.13.33 — fixed in 4.13.33

How to fix

Upgrade to a fixed version: Bosch Bcc101 Firmware 4.13.33; Bosch Bcc102 Firmware 4.13.33; Bosch Bcc50 Firmware 4.13.33. Check the vendor advisory for mitigations.

References

https://psirt.bosch.com/security-advisories/BOSCH-SA-473852.html
https://psirt.bosch.com/security-advisories/BOSCH-SA-473852.html

Get alerted when CVE-2023-49722 or the next vulnerability affects your stack