Bosch Divar Ip 5000 Firmware

9 CVEs affecting Bosch Divar Ip 5000 Firmware. Latest disclosed: 2023-06-15. Critical: 3, High: 2.

Top CVEs affecting Bosch Divar Ip 5000 Firmware
CVESeverityScorePublishedSummary
CVE-2020-6769Critical10.02020-02-07Missing Authentication for Critical Function in the Bosch Video Streaming Gateway (VSG) allows an unauthenticated remote attacker to retrieve and set arbitrary…
CVE-2019-11684Critical9.92021-02-26Improper Access Control in the RCP+ server of the Bosch Video Recording Manager (VRM) component allows arbitrary and unauthenticated access to a limited subset…
CVE-2021-23859Critical9.12021-12-08An unauthenticated attacker is able to send a special HTTP request, that causes a service to crash. In case of a standalone VRM or BVMS with VRM installation t…
CVE-2021-23862High7.22021-12-08A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in system context. This issue also affect…
CVE-2023-28175High7.12023-06-15Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal n…
CVE-2021-23861Medium6.52021-12-08By executing a special command, an user with administrative rights can get access to extended debug functionality on the VRM allowing an impact on integrity or…
CVE-2019-8952Medium6.52019-05-13A Path Traversal vulnerability located in the webserver affects several Bosch hardware and software products. The vulnerability potentially allows a remote aut…
CVE-2019-8951Medium6.12019-05-13An Open Redirect vulnerability located in the webserver affects several Bosch hardware and software products. The vulnerability potentially allows a remote att…
CVE-2021-23860Medium5.02021-12-08An error in a page handler of the VRM may lead to a reflected cross site scripting (XSS) in the web-based interface. To exploit this vulnerability an attack mu…