CVE-2019-8951: URL Redirection to Untrusted Site

An Open Redirect vulnerability located in the webserver affects several Bosch hardware and software products. The vulnerability potentially allows a remote attacker to redirect users to an arbitrary URL. Affected hardware products: Bosch DIVAR IP 2000 vulnerable versions: 3.10; 3.20; 3.21; 3.50;...

CVE-2019-8952: Improper Limitation of a Pathname to a Restricted Directory

A Path Traversal vulnerability located in the webserver affects several Bosch hardware and software products. The vulnerability potentially allows a remote authorized user to access arbitrary files on the system via the network interface. Affected hardware products: Bosch DIVAR IP 2000 vulnerable...

PT-2019-19277

Name of the Vulnerable Software and Affected Versions Bosch DIVAR IP 2000 versions 3.10 through 3.62 Bosch DIVAR IP 5000 versions 3.10 through 3.62 Video Recording Manager VRM versions 3.20 through 3.62 Bosch Video Management System BVMS versions 3.50.00XX through 3.60.00XX Description An Open...