What is the official website of Bosch Digital ?

The official website of Bosch Digital is https://www.bosch-digital.com/.

What is Bosch Digital's cybersecurity risk score?

Bosch Digital has an AI-generated cybersecurity risk score of 759 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Bosch Digital experienced?

According to Rankiteo, Bosch Digital currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Bosch Digital been affected by any supply chain cyber incidents ?

According to Rankiteo, Bosch Digital has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Bosch Digital have SOC 2 Type 1 certification ?

According to Rankiteo, Bosch Digital is not certified under SOC 2 Type 1.

Does Bosch Digital have SOC 2 Type 2 certification ?

According to Rankiteo, Bosch Digital does not hold a SOC 2 Type 2 certification.

Does Bosch Digital comply with GDPR ?

According to Rankiteo, Bosch Digital is not listed as GDPR compliant.

Does Bosch Digital have PCI DSS certification ?

According to Rankiteo, Bosch Digital does not currently maintain PCI DSS compliance.

Does Bosch Digital comply with HIPAA ?

According to Rankiteo, Bosch Digital is not compliant with HIPAA regulations.

Does Bosch Digital have ISO 27001 certification ?

According to Rankiteo,Bosch Digital is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Bosch Digital operate in ?

Bosch Digital operates primarily in the IT Services and IT Consulting industry.

How many employees does Bosch Digital have ?

Bosch Digital employs approximately 1,823 people worldwide.

Does Bosch Digital own any subsidiaries ?

Bosch Digital presently has no subsidiaries across any sectors.

How many LinkedIn followers does Bosch Digital have ?

Bosch Digital's official LinkedIn profile has approximately 50,413 followers.

What is the NAICS classification code for Bosch Digital ?

Bosch Digital is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does Bosch Digital have a Crunchbase profile ?

No, Bosch Digital does not have a profile on Crunchbase.

Does Bosch Digital have a LinkedIn profile ?

Yes, Bosch Digital maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/boschdigital.

How many cybersecurity incidents has Bosch Digital experienced ?

As of August 1, 2026, Rankiteo reports that Bosch Digital has experienced 3 cybersecurity incidents.

How many peer or competitor companies does Bosch Digital have ?

Bosch Digital has an estimated 41,229 peer or competitor companies worldwide.

What types of cybersecurity incidents has Bosch Digital faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach and Vulnerability.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Bosch Digital

Boost Score +25 with badge (5 left)

759

/1000

Fair

784

/1000

Fair

Bosch Digital Vendor Cyber Rating & Cyber Score

bosch-digital.com

Add Your Compliance Badge

We are Bosch Digital. Our mission is to shape the digital future of Bosch together with our business divisions. We invent, code and create digital products, services and solutions that spark enthusiasm and improve quality of life. Data Protection Notice: https://bit.ly/3SilQQH Bosch Digital is home to more than 10,000 unique and diverse talents around the world. Our agile mindset and working culture are a key driver of digital transformation at Bosch and gives both our associates and their ideas room to grow.  Take the next step with us! Find out more about our current open job positions and become part of Bosch Digital! Let us shape the digital tomorrow together: www.bosch.com/careers/

Bosch Digital A.I CyberSecurity Scoring

Scoring History

Bosch Digital

Bosch Digital CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Bosch Digital

Breach

12/2025

BOS1764973211

Bosch

Breach

12/2025

BOS1780504416

Bosch Digital

Vulnerability

100

1/2024

BOS334333310272...

Loading…

A.I.

Bosch Digital Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Bosch Digital

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Bosch Digital in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Bosch Digital in 2026.

Incident Types Bosch Digital vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Bosch Digital in 2026.

Incident History - Bosch Digital (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Bosch Digital Subsidiaries

Bosch Digital

IT Services and IT Consulting

Website: https://www.bosch-digital.com/

Company Size: 10,001+ employees

BoschSoftware Development

Bosch USASoftware Development

Bosch BrasilSoftware Development

Bosch Rexroth BrasilAutomation Machinery Manufacturing

Bosch Projects do BrasilIndustrial Machinery Manufacturing

Bosch IndiaMotor Vehicle Manufacturing

Bosch PortugalSoftware Development

Bosch Industry Consulting PortugalMechanical Or Industrial Engineering

INNOVATIVE CAR HMIFabricação de veículos automotores, reboques e carrocerias

Projeto Safe CitiesSecurity and Investigations

Bosch RexrothAutomation Machinery Manufacturing

CU.BE @Bosch RexrothIndustrial Machinery Manufacturing

ctrlX OS EcosystemAutomation Machinery Manufacturing

Bosch TürkiyeIndustrial Machinery Manufacturing

Bosch Turkey Automotive TechnologyMotor Vehicle Manufacturing

Bosch Turkey Industrial TechnologyIT Services and IT Consulting

Bosch Global Software TechnologiesSoftware Development

Bosch MobilityAutomotive

Origify Product AuthenticationTechnology, Information and Internet

Bosch Industry ConsultingBusiness Consulting and Services

Bosch ÖsterreichSoftware Development

Bosch Security and Safety SystemsAppliances, Electrical, and Electronics Manufacturing

Conference solutions by BoschProductie huishoudelijke apparaten en consumentenelektronica

IQSIGHTAppliances, Electrical, and Electronics Manufacturing

Bosch ChinaIT Services and IT Consulting

Bosch Middle EastIT Services and IT Consulting

Bosch Sensortec GmbHSemiconductor Manufacturing

Bosch MagyarországSoftware Development

Bosch Power ToolsAppliances, Electrical, and Electronics Manufacturing

Bosch Professional Power Tools and AccessoriesAppliances, Electrical, and Electronics Manufacturing

Bosch ResearchResearch Services

Bosch Home Comfort GroupRenewable Energy Semiconductor Manufacturing

Bosch Thermotechnik GmbHRenewable Energy Semiconductor Manufacturing

Bosch Energy and Building SolutionsElectrical Equipment Manufacturing

Bosch FranceIndustrial Machinery Manufacturing

Bosch Mobility Aftermarket FranceAutomotive

Bosch Home Comfort FranceMechanical Or Industrial Engineering

Bosch Rodez Manufacturing and ServicesIndustrial Machinery Manufacturing

Bosch NordicIT Services and IT Consulting

Bosch Service SolutionsBusiness Consulting and Services

Bosch Secure Truck ParkingTransportation, Logistics, Supply Chain and Storage

Bosch PolskaIndustrial Machinery Manufacturing

Bosch Hydrogen EnergyErneuerbare Energien und Halbleiterproduktion

Bosch RomaniaMotor Vehicle Manufacturing

Bosch Australia & New ZealandIndustrial Machinery Manufacturing

Bosch Australia Manufacturing Solutions (BAMS)Industrial Machinery Manufacturing

Bosch SwitzerlandSoftware Development

Bosch the NetherlandsTechnology, Information and Internet

Bosch Mobility Aftermarket NederlandMotor Vehicle Parts Manufacturing

Bosch Car Service NLMotor Vehicle Manufacturing

Bosch Connected IndustryInformation Technology & Services

Bosch JapanMotor Vehicle Manufacturing

Bosch UK & IrelandSoftware Development

Bosch Automotive Service Solutions UKIT Services and IT Consulting

Bosch Software InnovationsSoftware Development

Bosch Automotive NAMotor Vehicle Manufacturing

Bosch Manufacturing Solutions | BMGAutomation Machinery Manufacturing

Moehwald GmbHIndustrial Machinery Manufacturing

Bosch Manufacturing Solutions | BMG ChinaAutomation Machinery Manufacturing

Bosch Manufacturing Solutions | BMG IndiaAutomation Machinery Manufacturing

Bosch Manufacturing Solutions | BMG ASEANAutomation Machinery Manufacturing

Bosch Manufacturing Solutions | BMG SpainMachinery Manufacturing

Bosch Manufacturing Solutions | BMG Czech RepublicAutomation Machinery Manufacturing

Bosch Manufacturing Solutions | BMG MexicoAutomation Machinery Manufacturing

Bosch Manufacturing Solutions | BMG Middle EastAutomation Machinery Manufacturing

Bosch Manufacturing Solutions | BMG USAAutomation Machinery Manufacturing

Bosch VenturesVenture Capital and Private Equity Principals

Bosch Rexroth CanadaIndustrial Automation

Bosch Business InnovationsVenture Capital and Private Equity Principals

Bosch ConnectedWorldIT Services and IT Consulting

Bosch Comercial e Industrial EspañaIndustrial Machinery Manufacturing

CyberCompareIT Services and IT Consulting

CyberCompare Security DaysEvents Services

Junkers BoschHVAC and Refrigeration Equipment Manufacturing

Bosch CanadaSoftware Development

Bosch Life Safety SystemsFire Protection

Bosch Digital BulgariaIT Services and IT Consulting

Bosch Industrial PortugalIndustrial Machinery Manufacturing

Bosch BelgiumTechnology, Information and Internet

Bosch Digital Twin IndustriesSoftware Development

Loading…

Bosch Digital Similar Companies

Luxoft

cb luxoft.com

Luxoft, a DXC Technology Company (NYSE: DXC), is a digital strategy and software engineering firm providing bespoke technology solutions that drive business change for customers the world over. Acquired by U.S. company DXC Technology in 2019, Luxoft is a global operation in 44 cities and 21 countries with an international, agile workforce of nearly 18,000 people. It combines a unique blend of engineering excellence and deep industry expertise, helping over 425 global clients innovate in the areas of automotive, financial services, travel and hospitality, healthcare, life sciences, media and telecommunications. DXC Technology is a leading Fortune 500 IT services company which helps global companies run their mission critical systems. Together, DXC and Luxoft offer a differentiated customer-value proposition for digital transformation by combining Luxoft’s front-end digital capabilities with DXC’s expertise in IT modernization and integration. Follow our profile for regular updates and insights into technology and business needs.

Samsung SDS

samsungsds.com

Samsung SDS provides cloud computing and digital logistics services. We build an optimized cloud environment with Samsung Cloud Platform specialized for businesses, provide all-in-one management service based on 38 years of expertise in each industry, and boost work efficiency and customer service with our SaaS solution, which proved successful in many use cases. Your only partner to present a reasonable answer to the complex challenge of digital transformation is Samsung SDS. Samsung SDS prides itself in leading IT innovation in Korea for over years while spending every year evolving to meet the needs of our clients and changing times. Our constant effort put us 21st in 2021 Gartner Global IT Service Business, and 1st in Manufacturing IT. We have also been named the 12th Most Valuable Global IT Services Brand by Brand Finance UK in 2023, showing how we have grown into a global top-tier company. Samsung SDS offers cloud-based digital transformation services with distinguished cloud technology and rich industry experience. We are recognized by global consultants such as Gartner, IDC, and Frost & Sullivan in their lists of Managed Cloud Services, Cloud Security, and AI Industry as a specialized cloud service company supporting clients' digital innovation.

SoftServe

softserveinc.com

SoftServe is a premier IT consulting and digital services provider. We expand the horizon of new technologies to solve today's complex business challenges and achieve meaningful outcomes for our clients. Our boundless curiosity drives us to explore and reimagine the art of the possible. Clients confidently rely on SoftServe to architect and execute mature and innovative capabilities, such as digital engineering, data and analytics, cloud, and AI/ML. Our global reputation is gained from more than 30 years of experience delivering superior digital solutions at exceptional speed by top-tier engineering talent to enterprise industries, including high tech, financial services, healthcare, life sciences, retail, energy, and manufacturing. At SoftServe, we live by our values. Trust, teamwork, growth, innovation, willingness to help, and exceeding expectations are engrained in everything we do. We partner with major technology players, such as Google Cloud Platform, Amazon Web Services, Microsoft Azure, Salesforce, NVIDIA, MuleSoft, VMware, and Odoo, to give clients a competitive advantage in the market. Founded in 1993, our global firm is headquartered in Austin, Texas, USA, and Lviv, Ukraine. Visit our website, blog, media, and news pages for more information. Blog: softserveinc.com/blog Media: softserveinc.com/media News: softserveinc.com/news

TELUS Digital

telusdigital.com

TELUS Digital crafts unique and enduring experiences for customers and employees, and creates future-focused digital transformations that stand the test of time. We are the brand behind the brands. Our global team members are both passionate ambassadors of our clients’ products and services, and visionary technology experts resolute in our pursuit to elevate their end customer journeys, solve business challenges, mitigate risks, and drive continuous innovation. Our portfolio of end-to-end, integrated capabilities include digital IT services, such as cloud solutions and AI-fueled automation, trust and safety services, AI data solutions, including expertise in computer vision, and front-end digital design and consulting services. Fuel iX™ is TELUS Digital’s proprietary GenAI engine at the heart of our innovation, helping enterprises advance their GenAI pilots to working prototypes and production at scale, quickly, securely and responsibly across multiple environments, applications and clouds. Powered by purpose, TELUS Digital leverages technology, human ingenuity and compassion to fuel remarkable outcomes and create inclusive, thriving communities in the regions where we operate around the world. Guided by our Humanity-in-the-loop principles, we take a responsible approach to the transformational technologies we develop and deploy by proactively considering and addressing the broader impacts of our work.

Unisys

unisys.com

Unisys is a global technology solutions company that powers breakthroughs for the world’s leading organizations. Our solutions – cloud, AI, digital workplace, logistics and enterprise computing – help our clients challenge the status quo and unlock their full potential. To learn how we have been helping clients push what’s possible for more than 150 years, visit unisys.com.

Sogeti

sogeti.com

Part of the Capgemini Group, Sogeti makes business value through technology for organizations that need to implement innovation at speed and want a local partner with global scale. With a hands-on culture and close proximity to its clients, Sogeti implements solutions that will help organizations work faster, better, and smarter. By combining its agility and speed of implementation through a DevOps approach, Sogeti delivers innovative solutions in quality engineering, cloud and application development, all driven by AI, data and automation. For more information please visit www.sogeti.com.

inDrive

cb inDrive.com

inDrive is a global mobility and urban services platform. The inDrive app has been downloaded over 400 million times, and has been the second most downloaded mobility app for the third consecutive year. In addition to ride-hailing, inDrive provides an expanding list of urban services, including intercity transportation and delivery. In 2023, inDrive launched New Ventures, a venture and M&A arm. inDrive operates in 1065 cities in 48 countries. Driven by its mission of challenging social injustice, the company is committed to having a positive impact on the lives of one billion people by 2030. It pursues this goal both through its core business, which supports local communities via a fair pricing model; and through the work of inVision, its non-profit arm. inVision’s community empowerment programs help to advance education, sports, arts and sciences, gender equality and other vital initiatives. For more information visit www.inDrive.com

Serco

serco.com

We bring together the right people, the right technology and the right partners to create innovative solutions that make positive impact and address some of the most urgent and complex challenges facing the modern world. With a focus on serving governments globally, Serco’s services span justice, migration, defence, space, customer services, health, and transport. Our core capabilities include service design and advisory, resourcing, complex programme management, systems integration, case management, engineering, and asset & facilities management.

Atos

cb atos.net

Atos Group is a global leader in digital transformation with c. 67,000 employees and annual revenue of c. €10 billion, operating in 61 countries under two brands — Atos for services and Eviden for products. European number one in cybersecurity, cloud and high performance computing, Atos Group is committed to a secure and decarbonized future and provides tailored AI-powered, end-to-end solutions for all industries. Atos Group is the brand under which Atos SE (Societas Europaea) operates. Atos SE is listed on Euronext Paris. The purpose of Atos Group is to help design the future of the information space. Its expertise and services support the development of knowledge, education and research in a multicultural approach and contribute to the development of scientific and technological excellence. Across the world, the Group enables its customers and employees, and members of societies at large to live, work and develop sustainably, in a safe and secure information space.

Loading…

NEWS

Bosch Digital CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

November 11, 2025 08:00 AM

From Bosch to bold: KEENFINITY’s new agile era

MUNICH—Following its carve-out from Bosch on July 1, KEENFINITY Group has restructured into a decentralized holding model, revived legacy...

Read Article

October 23, 2025 07:00 AM

Automotive Cyber Security Market Report 2025: Revenues Grew

The automotive cyber security market is evolving due to increased connectivity and regulatory demands, presenting opportunities in...

Read Article

October 08, 2025 07:00 AM

Industrial Cyber Security Event

ICT Group will be present at the FHI Industrial Cyber Security event at the 1931 Conference Center in Den Bosch. This event offers practical insights into the...

Read Article

September 09, 2025 07:00 AM

Cybersecurity jobs available right now: September 9, 2025

Here are the worldwide cybersecurity job openings available as of September 9, 2025, including on-site, hybrid, and remote roles.

Read Article

August 18, 2025 07:00 AM

The Manufacturing Interview: Digant Shah, Bosch SDS

Digant Shah, Chief Revenue Officer at Bosch Software and Digital Solutions, on transforming manufacturing with responsible AI and...

Read Article

July 31, 2025 07:00 AM

Driving Secure: The Rise of Automotive Cybersecurity Solutions

A deep dive into automotive cybersecurity solutions protecting smart cars from hacks, ensuring compliance, and enabling safer mobility.

Read Article

July 22, 2025 07:00 AM

Norman Roberts and Clinton Bosch join Prescient as CTOs

Prescient Investment Management and Prescient Fund Services have announced the appointment of Norman Roberts and Clinton Bosch as chief...

Read Article

June 19, 2025 07:00 AM

Chandan Trehan of Bosch North America on failing correctly and ensuring digital fluency

Trehan explores how to manage the human-side of digitalisation, and why companies shouldn't be afraid of mistakes.

Read Article

June 04, 2025 07:00 AM

The power of data, AI and digital transformation in the supply chain

Automotive Logistics is back with this year's Automotive Logistics & Supply Chain Digital Strategies North America 2025.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-66720

SUMMARY

The GOOSE subscriber component improperly validates the UTC timestamp field in unauthenticated IEC 61850 GOOSE (EtherType 0x88B8) Layer-2 multicast messages. A specially crafted GOOSE frame containing an undersized timestamp field can trigger a heap out-of-bounds read during message processing, causing the process to crash and resulting in a denial-of-service condition.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

CVE-2026-66421

SUMMARY

OpenClaw Dashboard contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to execute arbitrary JavaScript in the administrator's browser session by injecting HTML markup into agent transcript messages processed through the sessions API. Attackers can craft a message containing inline event handler payloads such as an img tag with an onerror attribute within the 60-character rendering budget, which is stored in the session transcript and interpolated unsanitized into innerHTML on the default landing page, allowing theft of session tokens and unauthorized calls to authenticated administrative endpoints including agent instruction file modification.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 9.3)

cvss3

Base Score: 9.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

cvss4

Base Score: 8.8

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.8

Exploitability

2.8

REFERENCES

CVE-2026-66420

SUMMARY

MeshCentral 1.1.21 contains a cross-site WebSocket hijacking protection bypass vulnerability that allows unauthenticated remote attackers to hijack authenticated administrator sessions by exploiting an unconditional early return in the CheckWebServerOriginName() function within webserver.js when self-signed certificates are in use. Attackers can open cross-origin WebSocket connections to any of the twelve WebSocket endpoints, send crafted action commands to exfiltrate the server sessionKey used to sign session cookies, forge session tokens as arbitrary users, and gain full remote control of all managed devices governed by the MeshCentral instance.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-66369

SUMMARY

The GOOSE parser contains an off-by-one boundary-handling flaw that can be triggered by a single unauthenticated Layer-2 multicast frame on the process bus. When specific GOOSE message fields are processed, the parser advances its internal buffer position incorrectly, resulting in a heap out-of-bounds read. On affected platforms, this condition reliably terminates the subscriber process and causes a denial-of-service.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

CVE-2026-66364

SUMMARY

The GOOSE payload parser contains a boundary handling flaw that can be triggered by a single unauthenticated Layer 2 multicast frame on the process bus. When processing specific payload fields, an attacker controlled inner element length may exceed its enclosing length, causing the parser to over read by one byte. This out-of-bounds read reliably terminates the subscriber process, resulting in a denial-of-service condition.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…