Authentication flaw

Missing Authentication for Critical Function in the Bosch Video Streaming Gateway VSG allows an unauthenticated remote attacker to retrieve and set arbitrary configuration data of the Video Streaming Gateway. A successful attack can impact the confidentiality and availability of live and recorded...

CVE-2020-6770 Deserialization of Untrusted Data in Bosch BVMS Mobile Video Service

Deserialization of Untrusted Data in the BVMS Mobile Video Service BVMS MVS allows an unauthenticated remote attacker to execute arbitrary code on the system. This affects Bosch BVMS versions 10.0 = 10.0.0.1225, 9.0 = 9.0.0.827, 8.0 = 8.0.0.329 and 7.5 and older. This affects Bosch DIVAR IP 3000...

CVE-2020-6770

CVE-2020-6770 describes a deserialization of untrusted data in the BVMS Mobile Video Service (BVMS MVS) that allows an unauthenticated remote attacker to execute arbitrary code. Affected are Bosch BVMS versions 10.0.0.1225, 9.0.0.827, 8.0.0.329, and 7.5 and older; it also impacts DIVAR IP 3000/70...

CVE-2020-6768

CVE-2020-6768 is a path-traversal vulnerability in Bosch Video Management System (BVMS) NoTouch deployment that allows an unauthenticated remote attacker to read arbitrary files from the Central Server. Affected are BVMS during versions 10.0.0.1225 and earlier (10.x, 9.x, 8.x, 7.5 and older), BVM...

CVE-2020-6768 Path Traversal in Bosch Video Management System (BVMS)

A path traversal vulnerability in the Bosch Video Management System BVMS NoTouch deployment allows an unauthenticated remote attacker to read arbitrary files from the Central Server. This affects Bosch BVMS versions 10.0 = 10.0.0.1225, 9.0 = 9.0.0.827, 8.0 = 8.0.329 and 7.5 and older. This affect...

CVE-2020-6769 Missing Authentication for Critical Function in Bosch Video Streaming Gateway

Missing Authentication for Critical Function in the Bosch Video Streaming Gateway VSG allows an unauthenticated remote attacker to retrieve and set arbitrary configuration data of the Video Streaming Gateway. A successful attack can impact the confidentiality and availability of live and recorded...

CVE-2020-6769

CVE-2020-6769 concerns a missing authentication vulnerability in the Bosch Video Streaming Gateway (VSG). The issue allows an unauthenticated remote attacker to retrieve and set arbitrary configuration data on the VSG, with potential impact on the confidentiality and availability of live and reco...

CVE-2020-6767

A path traversal vulnerability in the Bosch Video Management System BVMS FileTransferService allows an authenticated remote attacker to read arbitrary files from the Central Server. This affects Bosch BVMS versions 10.0 = 10.0.0.1225, 9.0 = 9.0.0.827, 8.0 = 8.0.329 and 7.5 and older. This affects...

CVE-2020-6767

A path traversal vulnerability in the Bosch Video Management System BVMS FileTransferService allows an authenticated remote attacker to read arbitrary files from the Central Server. This affects Bosch BVMS versions 10.0 = 10.0.0.1225, 9.0 = 9.0.0.827, 8.0 = 8.0.329 and 7.5 and older. This affects...

Path traversal

A path traversal vulnerability in the Bosch Video Management System BVMS FileTransferService allows an authenticated remote attacker to read arbitrary files from the Central Server. This affects Bosch BVMS versions 10.0 = 10.0.0.1225, 9.0 = 9.0.0.827, 8.0 = 8.0.329 and 7.5 and older. This affects...

CVE-2020-6767

CVE-2020-6767 describes a path traversal vulnerability in Bosch BVMS FileTransferService that allows an authenticated remote attacker to read arbitrary files from the Central Server. Affected software includes Bosch BVMS (versions 10.0.0.1225 and 9.0.0.827 and 8.0.329, plus 7.5 and older) and BVM...

CVE-2020-6767 Path Traversal in Bosch Video Management System (BVMS)

A path traversal vulnerability in the Bosch Video Management System BVMS FileTransferService allows an authenticated remote attacker to read arbitrary files from the Central Server. This affects Bosch BVMS versions 10.0 = 10.0.0.1225, 9.0 = 9.0.0.827, 8.0 = 8.0.329 and 7.5 and older. This affects...

bosch-korolev.ru Improper Access Control vulnerability

Security Researcher geeknik Helped patch 8594 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting bosch-korolev.ru website and its users. Following...

cashback.si.bosch-home.com Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1007501 Security Researcher geeknik Helped patch 8938 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting cashback.si.bosch-home.com...

CVE-2019-11898

Unauthorized APE administration privileges can be achieved by reverse engineering one of the APE service tools. The service tool is discontinued with Bosch Access Professional Edition APE 3.8...

CVE-2019-11899

An unauthenticated attacker can achieve unauthorized access to sensitive data by exploiting Windows SMB protocol on a client installation. With Bosch Access Professional Edition APE 3.8, client installations need to be authorized by the APE administrator...

CVE-2019-11898

Unauthorized APE administration privileges can be achieved by reverse engineering one of the APE service tools. The service tool is discontinued with Bosch Access Professional Edition APE 3.8...

CVE-2019-11899

An unauthenticated attacker can achieve unauthorized access to sensitive data by exploiting Windows SMB protocol on a client installation. With Bosch Access Professional Edition APE 3.8, client installations need to be authorized by the APE administrator...

Information disclosure

An unauthenticated attacker can achieve unauthorized access to sensitive data by exploiting Windows SMB protocol on a client installation. With Bosch Access Professional Edition APE 3.8, client installations need to be authorized by the APE administrator...

CVE-2019-11899

An unauthenticated attacker can achieve unauthorized access to sensitive data by exploiting Windows SMB protocol on a client installation. With Bosch Access Professional Edition APE 3.8, client installations need to be authorized by the APE administrator...