High-Severity Flaws Uncovered in Bosch Thermostats and Smart Nutrunners

Multiple high-severity vulnerabilities were disclosed in Bosch BCC100 thermostats and Rexroth NXA015S-36V-B smart nutrunners that could allow unauthenticated remote code execution, malicious firmware updates, and root-level control leading to device bricking, safety-critical failures, or ransomware-style disruption; vendors have released or plan to release patches and recommend limiting network reachability and reviewing access as interim mitigations.