CVE-2020-6769

CVE-2020-6769 concerns a missing authentication vulnerability in the Bosch Video Streaming Gateway (VSG). The issue allows an unauthenticated remote attacker to retrieve and set arbitrary configuration data on the VSG, with potential impact on the confidentiality and availability of live and reco...

CVE-2019-8951

CVE-2019-8951 is an Open Redirect vulnerability in the Bosch webserver affecting multiple products. Affected hardware: DIVAR IP 2000 and 5000 with vulnerable firmware versions (DIVAR IP 2000: 3.10–3.62; fixed 3.62.0019+; DIVAR IP 5000: 3.10–3.62; fixed 3.80.0033+). Affected software: Video Record...

CVE-2019-8952

CVE-2019-8952 is a path-traversal vulnerability in Bosch webserver affecting multiple products: DIVAR IP 2000/5000, Video Recording Manager (VRM), and BVMS. A remote authorized user could access arbitrary files via the network interface. Vulnerable versions and fixed versions are detailed for eac...