The vulnerability arises from an improperly secured default SSH configuration in Bosch BSH ELP modules. The firmware includes a hardcoded, non-revocable SSH public key for the root user, which can be exploited by an attacker possessing the matching private key to bypass authentication controls and obtain root-level access to the device. This is classified under CWE-286 (Incorrect User Management). The CVSS 3.1 score is 8.1, indicating high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available.

An attacker with the private key corresponding to the embedded SSH public key can gain unauthorized root access to affected devices. This compromises the confidentiality, integrity, and availability of the system, potentially allowing full control over the appliance.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting network access to the affected devices and monitoring for unauthorized SSH access attempts. Replacement or revocation of the embedded SSH key is recommended once a vendor fix or guidance is available.