An Open Redirect vulnerability located in the webserver affects several Bosch hardware and software products. The vulnerability potentially allows a remote attacker to redirect users to an arbitrary URL. Affected hardware products: Bosch DIVAR IP 2000 (vulnerable versions: 3.10.

3.20.

3.21.

3.50.

3.51.

3.55.

3.60.

3.61.

3.62.

fixed versions: 3.62.0019 and newer), Bosch DIVAR IP 5000 (vulnerable versions: 3.10.

3.20.

3.21.

3.50.

3.51.

3.55.

3.60.

3.61.

3.62.

fixed versions: 3.80.0033 and newer). Affected software products: Video Recording Manager (VRM) (vulnerable versions: 3.20.

3.21.

3.50.

3.51.

3.55.

3.60.

3.61.

3.62.

fixed versions: 3.70.0056 and newer.

3.81.0032 and newer), Bosch Video Management System (BVMS) (vulnerable versions: 3.50.00XX.

3.55.00XX.

3.60.00XX.

fixed versions: 7.5.

3.70.0056).