CVE-2026-56428

Deferred Deferred - Pending Action

Improperly Secured Default SSH Key in BSH ELP Modules

Publication date: 2026-07-30

Last updated on: 2026-10-23

Assigner: Robert Bosch GmbH

Description

The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly secured default configuration. An insecure, non-revocable SSH public key is included in the firmware's authorized_keys file for the root user. An attacker in possession of the corresponding private key could leverage it to bypass authentication and gain root-level access to the appliance.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-30

Last Modified

2026-10-23

Generated

2026-11-08

AI Q&A

2026-07-30

EPSS Evaluated

2026-11-07

NVD

CVE-2026-56428

EUVD

EUVD-2026-51108

Affected Vendors & Products

Vendor	Product	Version / Range
bosch	bsh_elp	From 65.0.0 (inc) to 65.2.11 (inc)
bosch	bsh_elp	65.2.12

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-286	The product does not properly manage a user within its environment.

Attack-Flow Graph

Executive Summary

This vulnerability affects BSH ELP modules used in Bosch, Siemens, Gaggenau, and Neff home appliances. It involves an insecure default SSH configuration where a non-revocable public key is embedded in the firmware's authorized_keys file for the root user. An attacker with the corresponding private key can bypass authentication and gain root access.

Detection Guidance

Check the authorized_keys file for the root user on BSH ELP modules. Look for the presence of the insecure default SSH public key in /root/.ssh/authorized_keys. Use commands like 'cat /root/.ssh/authorized_keys' or 'ssh-keygen -l -f /root/.ssh/authorized_keys' to inspect keys.

Impact Analysis

An attacker could exploit this to gain root-level access to the appliance, potentially allowing unauthorized control or data access. The impact includes compromised confidentiality, integrity, and availability of the system.

Compliance Impact

This vulnerability could lead to unauthorized access, potentially violating data protection requirements under GDPR or HIPAA. Non-compliance risks include legal penalties and reputational damage due to compromised sensitive data.

Mitigation Strategies

Update the firmware to version 65.2.12 or higher immediately. If updating is not possible, implement network segmentation to restrict access to the SSH service and apply strict access control measures to limit exposure.

Hi! I’m here to help you understand CVE-2026-56428. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...