CVE-2023-28175

🗓️ 15 Jun 2023 10:14:34Reported by boschType

Improper Authorization in Bosch VMS SSH server allows remote acces

Reporter	Title	Published	Views	Family All 8
CNNVD	Bosch Video Management System 安全漏洞	15 Jun 202300:00	–	cnnvd
Cvelist	CVE-2023-28175	15 Jun 202310:14	–	cvelist
EUVD	EUVD-2023-31883	3 Oct 202520:07	–	euvd
NVD	CVE-2023-28175	15 Jun 202311:15	–	nvd
Prion	Authorization	15 Jun 202311:15	–	prion
Positive Technologies	PT-2023-3279 · Bosch · Bosch Bvms	24 May 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-28175	23 May 202503:35	–	redhatcve
Vulnrichment	CVE-2023-28175	15 Jun 202310:14	–	vulnrichment

NVD

Node

bosch video_management_systemRange7.5–11.1.1

bosch video_management_system_viewerRange7.5–11.1.1

AND

bosch divar_ip_4000Match-

bosch divar_ip_5000Match-

bosch divar_ip_6000Match-

bosch divar_ip_7000Match-

bosch divar_ip_7000_r2Match-

bosch divar_ip_7000_r3Match-

Node

bosch divar_ip_3000_firmwareRange7.5–8.0

AND

bosch divar_ip_3000Match-

Node

bosch divar_ip_6000_firmwareMatch11.1.1

AND

bosch divar_ip_6000Match-

Node

bosch divar_ip_4000_firmwareMatch11.1.1

AND

bosch divar_ip_4000Match-

Node

bosch divar_ip_5000_firmwareRange9.0–11.1.1

AND

bosch divar_ip_5000Match-

Node

bosch divar_ip_7000_r2_firmwareRange7.5–11.1.1

AND

bosch divar_ip_7000_r2Match-

Node

bosch divar_ip_7000_firmwareRange7.5–8.0

AND

bosch divar_ip_7000Match-

Node

bosch divar_ip_7000_r3_firmwareRange10.1.1–11.1.1

AND

bosch divar_ip_7000_r3Match-

[
  {
    "vendor": "Bosch",
    "product": "BVMS",
    "versions": [
      {
        "version": "7.5",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "11.1.1"
      }
    ]
  },
  {
    "vendor": "Bosch",
    "product": "BVMS Viewer",
    "versions": [
      {
        "version": "7.5",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "11.1.1"
      }
    ]
  },
  {
    "vendor": "Bosch",
    "product": "Bosch DIVAR IP 3000",
    "versions": [
      {
        "version": "7.5",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "8.0"
      }
    ]
  },
  {
    "vendor": "Bosch",
    "product": "Bosch DIVAR IP 7000 R1",
    "versions": [
      {
        "version": "7.5",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "8.0"
      }
    ]
  },
  {
    "vendor": "Bosch",
    "product": "Bosch DIVAR IP 7000 R2",
    "versions": [
      {
        "version": "7.5",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "11.1.1"
      }
    ]
  },
  {
    "vendor": "Bosch",
    "product": "Bosch DIVAR IP all-in-one 7000 R3",
    "versions": [
      {
        "version": "10.1.1",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "11.1.1"
      }
    ]
  },
  {
    "vendor": "Bosch",
    "product": "Bosch DIVAR IP all-in-one 5000",
    "versions": [
      {
        "version": "9.0",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "11.1.1"
      }
    ]
  },
  {
    "vendor": "Bosch",
    "product": "Bosch DIVAR IP all-in-one 7000",
    "versions": [
      {
        "version": "9.0",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "11.1.1"
      }
    ]
  },
  {
    "vendor": "Bosch",
    "product": "DIVAR IP all-in-one 4000",
    "versions": [
      {
        "version": "11.1.1",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Bosch",
    "product": "DIVAR IP all-in-one 6000",
    "versions": [
      {
        "version": "11.1.1",
        "status": "affected"
      }
    ]
  }
]

Source	Link
psirt	www.psirt.bosch.com/security-advisories/BOSCH-SA-025794-bt.html

21 Nov 2024 07:54Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.1 - 7.7

EPSS0.00192

SSVC