CVE-2023-35867

<= 12.0

An improper handling of a malformed API answer packets to API clients in Bosch BT software products can allow an unauthenticated a

5.9MEDIUM

CVE-2023-28175

>= 7.5 and <= 11.1.1

Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources

7.1HIGH

CVE-2022-32540

>= 10.1 and <= 10.1.1

Information Disclosure in Operator Client application in BVMS 10.1.1, 11.0 and 11.1.0 and VIDEOJET Decoder VJD-7513 versions 10.23

5.9MEDIUM

CVE-2021-23862

<= 9.0

A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in system co

7.2HIGH

CVE-2021-23861

<= 9.0

By executing a special command, an user with administrative rights can get access to extended debug functionality on the VRM allow

6.5MEDIUM

CVE-2021-23860

<= 9.0

An error in a page handler of the VRM may lead to a reflected cross site scripting (XSS) in the web-based interface. To exploit th

5.0MEDIUM

CVE-2021-23859

<= 9.0

An unauthenticated attacker is able to send a special HTTP request, that causes a service to crash. In case of a standalone VRM or

9.1CRITICAL

CVE-2020-6785

< 9.0

Loading a DLL through an Uncontrolled Search Path Element in Bosch BVMS and BVMS Viewer in versions 10.1.0, 10.0.1, 10.0.0 and 9.0

7.8HIGH

CVE-2019-11684

all versions

Improper Access Control in the RCP+ server of the Bosch Video Recording Manager (VRM) component allows arbitrary and unauthenticat

9.9CRITICAL

CVE-2020-6768

<= 7.5

A path traversal vulnerability in the Bosch Video Management System (BVMS) NoTouch deployment allows an unauthenticated remote att

8.6HIGH

CVE-2020-6767

<= 7.5

A path traversal vulnerability in the Bosch Video Management System (BVMS) FileTransferService allows an authenticated remote atta

7.7HIGH

CVE-2019-6958

<= 9.0

A recently discovered security vulnerability affects all Bosch Video Management System (BVMS) versions 9.0 and below, DIVAR IP 200

9.1CRITICAL

CVE-2019-6957

<= 9.0

A recently discovered security vulnerability affects all Bosch Video Management System (BVMS) versions 9.0 and below, DIVAR IP 200

9.8CRITICAL

CVE-2019-8952

< 3.71.0032

A Path Traversal vulnerability located in the webserver affects several Bosch hardware and software products. The vulnerability po

6.5MEDIUM

CVE-2019-8951

< 3.71.0056

An Open Redirect vulnerability located in the webserver affects several Bosch hardware and software products. The vulnerability po

6.1MEDIUM