Bosch B426 Web Configuration Credential Information Disclosure Vulnerability

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Bosch B426. User interaction is required to exploit this vulnerability. The specific flaw exists within the handling of login credentials provided to the login.cgi endpoint. The iss...

Bosch B426 安全漏洞

Bosch B426 is a firmware from Bosch Germany. A security vulnerability exists in Bosch B426 that allows network-adjacent attackers to disclose sensitive information about an affected Bosch B426 installation...

CVE-2021-23853

In Bosch IP cameras, improper validation of the HTTP header allows an attacker to inject arbitrary HTTP headers through crafted URLs...

CVE-2021-23852

An authenticated attacker with administrator rights Bosch IP cameras can call an URL with an invalid parameter that causes the camera to become unresponsive for a few seconds and cause a Denial of Service DoS...

CVE-2021-23848

An error in the URL handler Bosch IP cameras may lead to a reflected cross site scripting XSS in the web-based interface. An attacker with knowledge of the camera address can send a crafted link to a user, which will execute javascript code in the context of the user...

CVE-2021-23847

A Missing Authentication in Critical Function in Bosch IP cameras allows an unauthenticated remote attacker to extract sensitive information or change settings of the camera by sending crafted requests to the device. Only devices of the CPP6, CPP7 and CPP7.3 family with firmware 7.70, 7.72, and...

CVE-2021-23854

An error in the handling of a page parameter in Bosch IP cameras may lead to a reflected cross site scripting XSS in the web-based interface. This issue only affects versions 7.7x and 7.6x. All other versions are not affected...

Weak password vulnerability in VRM of Bosch (China) Investment Co.

Bosch China Investment Co., Ltd. operates in the fields of machinery manufacturing, light industry, electronics and information industry. A weak password vulnerability exists in the VRM of Bosch China Investment Co. Ltd. that can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in VRM of Bosch (China) Investment Ltd (CNVD-2021-33408)

Bosch China Investment Co., Ltd. operates in the fields of machinery manufacturing, light industry, electronics and information industry. An unauthorized access vulnerability exists in the VRM of Bosch China Investment Co. Ltd. that can be exploited by attackers to obtain sensitive information...

Unauthorized Access Vulnerability in Multiple BOSCH Systems

bosch generally refers to Bosch. Bosch is one of Germany's industrial companies engaged in the industries of automotive and intelligent transportation technology, industrial technology, consumer goods, and energy and building technology. An unauthorized access vulnerability exists in several BOSC...

Unspecified Vulnerability in Bosch IP Helper

Bosch IP Helper is an industrial control device from Bosch, Germany. Universal discovery and network configuration tool for all Bosch IP Network Video products. A security vulnerability exists in Bosch IP Helper that could allow an attacker to execute arbitrary code on a victim's system...

Bosch BVMS and BVMS Viewer Code Issue Vulnerability

Bosch BVMS is an application system from Bosch, Germany. It is used for video management. A code issue vulnerability exists in Bosch BVMS and BVMS Viewer, which can be exploited by an attacker to execute arbitrary code on the victim's system...

Bosch Video Client Code Issue Vulnerability

Bosch Video Client is an application from the German company Bosch. It is used to display cameras connected to the network in real time. A code issue vulnerability exists in Bosch Video Client, which can be exploited by an attacker to execute arbitrary code on a victim's system...

Bosch Configuration Manager Code Issue Vulnerability

Bosch BVMS is an application system from Bosch, Germany. It is used for video management. A code issue vulnerability exists in Bosch Configuration Manager, which can be exploited by an attacker to execute arbitrary code on a victim's system...

CVE-2020-6785

Loading a DLL through an Uncontrolled Search Path Element in Bosch BVMS and BVMS Viewer in versions 10.1.0, 10.0.1, 10.0.0 and 9.0.0 and older potentially allows an attacker to execute arbitrary code on a victim's system. This affects both the installer as well as the installed application. This...

CVE-2020-6787

Loading a DLL through an Uncontrolled Search Path Element in the Bosch Video Client installer up to and including version 1.7.6.079 potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious DLL in the same...

CVE-2020-6771

Loading a DLL through an Uncontrolled Search Path Element in Bosch IP Helper up to and including version 1.00.0008 potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious DLL in the same application...

CVE-2020-6788

Loading a DLL through an Uncontrolled Search Path Element in the Bosch Configuration Manager installer up to and including version 7.21.0078 potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious DLL in...

CVE-2020-6785

Loading a DLL through an Uncontrolled Search Path Element in Bosch BVMS and BVMS Viewer in versions 10.1.0, 10.0.1, 10.0.0 and 9.0.0 and older potentially allows an attacker to execute arbitrary code on a victim's system. This affects both the installer as well as the installed application. This...

CVE-2020-6788

Loading a DLL through an Uncontrolled Search Path Element in the Bosch Configuration Manager installer up to and including version 7.21.0078 potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious DLL in...