CVE-2020-6781

7.4 highEPSS 0.5%

High (7.4) in bosch smart home. EPSS 0.5% chance of exploitation in the next 30 days.

Improper certificate validation for certain connections in the Bosch Smart Home System App for iOS prior to version 9.17.1 potentially allows to intercept video contents by performing a man-in-the-middle attack.

Severity

CVSS 3.1

7.4 high

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
CWE: CWE-295
Published: 2020-09-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

bosch:smart_home

References

https://psirt.bosch.com/security-advisories/BOSCH-SA-347336.html
https://psirt.bosch.com/security-advisories/BOSCH-SA-347336.html

Check your stack JSON