bosch bosch video management system 11.0 vulnerabilities and exploits

(subscribe to this query)

Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal network via a port forwarding request.

Bosch Video Management System Bosch Video Management System Viewer Bosch Divar Ip 3000 Firmware Bosch Divar Ip 6000 Firmware 11.1.1 Bosch Divar Ip 4000 Firmware 11.1.1 Bosch Divar Ip 5000 Firmware Bosch Divar Ip 7000 R2 Firmware Bosch Divar Ip 7000 Firmware Bosch Divar Ip 7000 R3 Firmware

An unauthenticated attacker is able to send a special HTTP request, that causes a service to crash. In case of a standalone VRM or BVMS with VRM installation this crash also opens the possibility to send further unauthenticated commands to the service. On some products the interf...

Bosch Bosch Video Management System Bosch Bosch Video Management System 10.1 Bosch Bosch Video Management System 11.0 Bosch Video Recording Manager Bosch Access Easy Controller Firmware Bosch Video Recording Manager Exporter Bosch Building Integration System Bosch Access Professional Edition

A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in system context. This issue also affects installations of the VRM, DIVAR IP, BVMS with VRM installed, the VIDEOJET decoder (VJD-7513 and VJD-8000).

Bosch Bosch Video Management System Bosch Bosch Video Management System 10.1 Bosch Bosch Video Management System 11.0 Bosch Video Recording Manager Bosch Videojet Decoder 7513 Firmware Bosch Videojet Decoder 8000 Firmware

By executing a special command, an user with administrative rights can get access to extended debug functionality on the VRM allowing an impact on integrity or availability of the installed software. This issue also affects installations of the DIVAR IP and BVMS with VRM installe...

Bosch Bosch Video Management System Bosch Bosch Video Management System 10.1 Bosch Bosch Video Management System 11.0 Bosch Video Recording Manager

An error in a page handler of the VRM may lead to a reflected cross site scripting (XSS) in the web-based interface. To exploit this vulnerability an attack must be able to modify the HTTP header that is sent. This issue also affects installations of the DIVAR IP and BVMS with VR...

Bosch Bosch Video Management System Bosch Bosch Video Management System 10.1 Bosch Bosch Video Management System 11.0 Bosch Video Recording Manager

Information Disclosure in Operator Client application in BVMS 10.1.1, 11.0 and 11.1.0 and VIDEOJET Decoder VJD-7513 versions 10.23 and 10.30 allows man-in-the-middle malicious user to compromise confidential video stream. This is only applicable for UDP encryption when target sys...

Bosch Bosch Video Management System 11.0 Bosch Bosch Video Management System Bosch Videojet Decoder 7513 Firmware 10.23.0002 Bosch Videojet Decoder 7513 Firmware 10.30.0005

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook