CVE-2026-56428
Received Received - Intake

Improperly Secured Default SSH Key in BSH ELP Modules

Publication date: 2026-07-30

Last updated on: 2026-07-30

Assigner: Robert Bosch GmbH

Description
The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly secured default configuration. An insecure, non-revocable SSH public key is included in the firmware's authorized_keys file for the root user. An attacker in possession of the corresponding private key could leverage it to bypass authentication and gain root-level access to the appliance.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-30
Last Modified
2026-07-30
Generated
2026-07-30
AI Q&A
2026-07-30
EPSS Evaluated
N/A
NVD
CVE-2026-56428
EUVD
EUVD-2026-51108

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
bosch bsh_elp From 65.0.0 (inc) to 65.2.11 (inc)
bosch bsh_elp 65.2.12

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-286 The product does not properly manage a user within its environment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects BSH ELP modules used in Bosch, Siemens, Gaggenau, and Neff home appliances. It involves an insecure default SSH configuration where a non-revocable public key is embedded in the firmware's authorized_keys file for the root user. An attacker with the corresponding private key can bypass authentication and gain root access.

Detection Guidance

Check the authorized_keys file for the root user on BSH ELP modules. Look for the presence of the insecure default SSH public key in /root/.ssh/authorized_keys. Use commands like 'cat /root/.ssh/authorized_keys' or 'ssh-keygen -l -f /root/.ssh/authorized_keys' to inspect keys.

Impact Analysis

An attacker could exploit this to gain root-level access to the appliance, potentially allowing unauthorized control or data access. The impact includes compromised confidentiality, integrity, and availability of the system.

Compliance Impact

This vulnerability could lead to unauthorized access, potentially violating data protection requirements under GDPR or HIPAA. Non-compliance risks include legal penalties and reputational damage due to compromised sensitive data.

Mitigation Strategies

Update the firmware to version 65.2.12 or higher immediately. If updating is not possible, implement network segmentation to restrict access to the SSH service and apply strict access control measures to limit exposure.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-56428. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart