CVE-2019-6957

CVE-2019-6957 affects Bosch products including BVMS ≤ v9.0, DIVAR IP 2000–7000, VRM, VSG, Configuration Manager, BIS with Video Engine, APE, AEC, BV C, and VSDK. The issue is described as a buffer overflow vulnerability that potentially allows unauthorized code execution over the network interfac...

CVE-2021-23859

CVE-2021-23859 affects Bosch VRM and BVMS with VRM installations. An unauthenticated attacker can send a crafted HTTP request that crashes the targeted service, and in standalone VRM or BVMS configurations this crash may allow sending further unauthenticated commands to the service. Some products...

CVE-2021-23860

CVE-2021-23860 describes a reflected XSS in Bosch VRM/web interfaces due to an error in a page handler that allows an attacker to modify the HTTP header to exploit the vulnerability. The issue also affects DIVAR IP and BVMS with VRM installed. Publicly available details identify the affected comp...

CVE-2023-32230

CVE-2023-32230 concerns Bosch BT software, where improper handling of a malformed API request against an API server enables an unauthenticated attacker to cause a Denial of Service (DoS) over the network. The vulnerability is described across multiple sources as affecting Bosch BT software produc...

CVE-2019-11684

The CVE-2019-11684 entry covers an improper access control flaw in the RCP+ server of the Bosch Video Recording Manager (VRM) component. It allows arbitrary, unauthenticated access to a limited subset of certificates stored by Windows. Affected products/versions include VRM v3.70.x, VRM v3.71 up ...

CVE-2019-8951

CVE-2019-8951 is an Open Redirect vulnerability in the Bosch webserver affecting multiple products. Affected hardware: DIVAR IP 2000 and 5000 with vulnerable firmware versions (DIVAR IP 2000: 3.10–3.62; fixed 3.62.0019+; DIVAR IP 5000: 3.10–3.62; fixed 3.80.0033+). Affected software: Video Record...

CVE-2020-6786

CVE-2020-6786 : Concrete details from connected documents show a local code execution issue in the Bosch Video Recording Manager installer due to an Uncontrolled Search Path Element when loading a DLL. Affected versions are up to 3.82.0055 (3.82 line) and up to 3.81.0064 (3.81/3.71 and older). Th...

CVE-2021-23861

CVE-2021-23861 affects Bosch VRM and related BVMS/DIVAR IP deployments with VRM installed. The issue allows an administrative user to execute a command that grants access to extended debug functionality, potentially impacting integrity and availability of the installed software. Affected products...

CVE-2021-23862

CVE-2021-23862 describes an authenticated command-injection flaw: a crafted configuration packet sent by an authenticated administrative user can execute arbitrary commands in the system context. Affected products include Bosch VRM, DIVAR IP, BVMS with VRM installed, and the VIDEOJET decoder (VJD...

CVE-2019-8952

CVE-2019-8952 is a path-traversal vulnerability in Bosch webserver affecting multiple products: DIVAR IP 2000/5000, Video Recording Manager (VRM), and BVMS. A remote authorized user could access arbitrary files via the network interface. Vulnerable versions and fixed versions are detailed for eac...