High-severity flaws in Bosch BCC100 thermostats and Rexroth NXA015S-36V-B smart nutrunners expose potential code execution. Bosch addressed the BCC100 vulnerability (CVE-2023-49722) in November 2023, closing an open port used for unauthorized connections.
Rexroth faces over two dozen flaws allowing attackers to disrupt operations, tamper with configurations, or install ransomware. Patches expected by January 2024; users advised to limit network reachability.
Â
Read the full article HERE