CVE-2023-28175

CVE-2023-28175 concerns Bosch VMS, where the SSH server permits a remote authenticated user to access resources on the trusted internal network via a port forwarding request due to improper authorization. Affected products are Bosch VMS versions 11.0, 11.1.0, and 11.1.1. The CVE entry is corrobor...

CVE-2023-28175

Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal network via a port forwarding request...

CVE-2023-32229

Due to an error in the software interface to the secure element chip on Bosch IP cameras of family CPP13 and CPP14, the chip can be permanently damaged when enabling the Stream security option signing of the video stream with option MD5, SHA-1 or SHA-256...

CVE-2023-32229

CVE-2023-32229 affects Bosch IP cameras in the CPP13/CPP14 families. The issue arises from an error in the software interface to the secure element chip, which can permanently damage the chip when enabling the Stream security option (signing the video stream) with MD5, SHA-1 or SHA-256. Public re...

CVE-2023-32229

Due to an error in the software interface to the secure element chip on Bosch IP cameras of family CPP13 and CPP14, the chip can be permanently damaged when enabling the Stream security option signing of the video stream with option MD5, SHA-1 or SHA-256...

PT-2023-23672 · Bosch · Bosch Ip Cameras

Name of the Vulnerable Software and Affected Versions: Bosch IP cameras of family CPP13 and CPP14 affected versions not specified Description: The issue arises from an error in the software interface to the secure element chip. This error can cause permanent damage to the chip when the Stream...

Bosch IP cameras 资源管理错误漏洞

Bosch IP cameras are network cameras from Bosch, Germany. A resource management error vulnerability exists in Bosch Camera CPP13 firmware versions prior to 8.48 and CPP14 firmware versions 8.50 through 8.72, which is caused due to an error in the software interface of the security element chip...

CVE-2023-32229: Improper Write Handling in Limited-write Non-Volatile Memories

Due to an error in the software interface to the secure element chip on Bosch IP cameras of family CPP13 and CPP14, the chip can be permanently damaged when enabling the Stream security option signing of the video stream with option MD5, SHA-1 or SHA-256...

CVE-2023-28175: Exposure of Sensitive Information to an Unauthorized Actor

Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal network via a port forwarding request...

Bosch Video Management System 安全漏洞

Bosch Video Management System is a video management system from Bosch, Germany. A security vulnerability exists in Bosch Video Management System, which stems from improper authorization of the SSH server, allowing an authenticated attacker to access resources on the internal network via port...

PT-2023-3279 · Bosch · Bosch Bvms

Name of the Vulnerable Software and Affected Versions: Bosch VMS versions 11.0 through 11.1.1 Description: The issue is related to insufficient protection of service data in the SSH server of the Bosch BVMS video surveillance system management software. It allows a remote attacker to gain...

bosch-mondeville.com Cross Site Scripting vulnerability OBB-3356603

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of the control panel of the microprogrammed communication Ethernet modules of Bosch B420 allows a hacker to bypass security restrictions and gain unauthorized access to protected information.

The vulnerability of the control panel of Bosch B420 communication Ethernet modules is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to bypass security restrictions and gain unauthorized access to protected information by sending specially crafted...

Bosch Security Systems B420 安全漏洞

Bosch Security Systems B420 is an Ethernet communication module from Bosch Security Systems, USA. A security vulnerability exists in Bosch Security Systems B420 version 02.02.0001. An attacker who exploits this vulnerability could gain access to their device by being on the same network as a...

PT-2022-6306 · Bosch · Bosch B420

Name of the Vulnerable Software and Affected Versions: Bosch B420 firmware 02.02.0001 Description: The issue is related to improper access control in the Bosch B420 Ethernet module's control panel, allowing an attacker to bypass security restrictions and gain unauthorized access to protected...

Bosch VIDEOJET multi 4000 跨站脚本漏洞

Bosch VIDEOJET multi 4000 is a 16-channel CCTV video encoder from Bosch. It provides best-in-class IP video performance for security camera systems. A security vulnerability exists in the Bosch VIDEOJET multi 4000 version, which stems from incomplete filtering of JavaScript code for different...

Bosch VIDEOJET multi 4000 跨站脚本漏洞

Bosch VIDEOJET multi 4000 is a 16-channel CCTV video encoder from Bosch. It provides best-in-class IP video performance for security camera systems. A security vulnerability exists in the Bosch VIDEOJET multi 4000 version, which stems from an error in the URL handler that could lead to reflective...

Bosch BVMS 信息泄露漏洞

Bosch BVMS is an application system from Bosch Germany. It is used for video management. An information disclosure vulnerability exists in Bosch BVMS and VIDEOJET Decoder VJD-7513. An attacker could exploit this vulnerability to disclose sensitive information. The following products and versions...

Bosch BF-OS 安全漏洞

Bosch BF-OS is an operating system from the German company Bosch that runs in 100% BF. A security vulnerability exists in BF-OS versions 3.x through 3.83 that stems from not enforcing strong passwords, which could allow a remote attacker to brute-force break device passwords...

Bosch BF-OS 注入漏洞

Bosch BF-OS is an operating system from Bosch, Germany that runs in 100% BF. An injection vulnerability exists in BF-OS versions 3.00 through 3.83, which stems from a file path manipulation vulnerability that allows an attacker to modify a file path to access different resources that may contain...