Bosch

Products

ProductCVEsExploitedLatest
DIVAR IP all-in-one 50009–Dec 18, 2023
BVMS9–Apr 15, 2026
Infotainment system ECU8–Feb 15, 2026
CPP Firmware8–Mar 30, 2022
DIVAR IP all-in-one 70006–Dec 18, 2023
DIVAR IP 7000 R26–Dec 18, 2023
BVMS Viewer6–Apr 15, 2026
BIS5–Apr 11, 2024
DIVAR IP 70004–Feb 7, 2020
Camera Firmware4–Jul 23, 2026
VRM4–Dec 8, 2021
DIVAR IP 30004–Feb 7, 2020
APE3–Jan 19, 2022
DIVAR IP all-in-one 60003–Apr 15, 2026
AMS3–Apr 11, 2024
DIVAR IP all-in-one 40003–Apr 15, 2026
Video Streaming Gateway3–Dec 18, 2023
PRA-ES8P2S3–Jun 22, 2022
VJD-75133–Dec 18, 2023
B426 Firmware2–Jun 18, 2021
Video Recording Manager2–Dec 18, 2023
VIDEOJET multi 40002–Oct 27, 2022
Configuration Manager2–Dec 18, 2023
AMC22–Jan 19, 2022
Bosch DIVAR IP 7000 R22–Apr 15, 2026
Bosch DIVAR IP all-in-one 50002–Apr 15, 2026
Bosch DIVAR IP all-in-one 7000 R32–Apr 15, 2026
Bosch DIVAR IP all-in-one 70002–Apr 15, 2026
BF-OS2–Aug 1, 2022
Bosch Video Management System2–Feb 7, 2020
FSM-50002–Jan 25, 2021
PRAESENSA2–Jan 14, 2021
PRAESIDEO2–Jan 14, 2021
FSM-25002–Jan 25, 2021
VRM Exporter1–Dec 8, 2021
B4201–Feb 8, 2023
B426-CN/B429- CN Firmware1–Jun 18, 2021
B426-M Firmware1–Jun 18, 2021
BCC1011–Jan 9, 2024
BCC1021–Jan 9, 2024
BCC501–Jan 9, 2024
BIS Video Engine1–Dec 18, 2023
Bosch Configuration Manager1–Jul 23, 2026
Bosch DIVAR IP 30001–Jun 15, 2023
Bosch DIVAR IP 7000 R11–Jun 15, 2023
Bosch Recording Station1–May 27, 2020
BSH ELP (Electronic Platform) Modules1–Jul 30, 2026
BVMS Mobile Video Service1–Feb 7, 2020
DIVAR IP 20001–Feb 7, 2020
DIVAR IP 50001–Feb 7, 2020
DIVAR IP all-in-one 7000 R31–Dec 18, 2023
Intelligent Insights1–Dec 18, 2023
IP Helper1–Mar 25, 2021
Monitor Wall1–Mar 25, 2021
Monitorwall1–Dec 18, 2023
Network Synchronizer Enterprise1–Mar 25, 2024
Network Synchronizer Standard1–Mar 25, 2024
ONVIF Camera Event Driver Tool1–Dec 18, 2023
Project Assistant1–Dec 18, 2023
Smart Home1–Sep 16, 2020
Video Client1–Mar 25, 2021
Video Security Client1–Dec 18, 2023
VJD-75231–Dec 18, 2023
VJD-80001–Dec 8, 2021
AEC1–Dec 8, 2021

Exploited and recent CVEs

  • CVE-2026-56428 High 8.1 The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly secured default configuration. An insecure, non-revocable SSH public key is inc 0.5%
  • CVE-2024-58330 High 7.5 A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytics event data. 0.5%
  • CVE-2024-58023 High 8.4 Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to access sensitive information. 0.1%
  • CVE-2024-33618 High 7.5 Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1 allows attackers to consume excessive amounts of disk space via network interface. 0.5%
  • CVE-2024-33618 High 7.5 Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1 allows attackers to consume excessive amounts of disk space via network interface. 0.5%
  • CVE-2024-33618 High 7.5 Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1 allows attackers to consume excessive amounts of disk space via network interface. 0.5%
  • CVE-2024-33618 High 7.5 Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1 allows attackers to consume excessive amounts of disk space via network interface. 0.5%
  • CVE-2024-33618 High 7.5 Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1 allows attackers to consume excessive amounts of disk space via network interface. 0.5%
  • CVE-2024-33618 High 7.5 Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1 allows attackers to consume excessive amounts of disk space via network interface. 0.5%
  • CVE-2024-33618 High 7.5 Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1 allows attackers to consume excessive amounts of disk space via network interface. 0.5%
  • CVE-2024-33618 High 7.5 Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1 allows attackers to consume excessive amounts of disk space via network interface. 0.5%
  • CVE-2025-32063 Medium 6.8 Enabling SSH server on Infotainment ECU 0.2%
  • CVE-2025-32062 High 8.8 Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU 0.4%
  • CVE-2025-32061 High 8.8 Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU 0.4%
  • CVE-2025-32060 Medium 6.7 Absence of Kernel Module Signature Verification on Linux System of Infotainment ECU 0.1%
  • CVE-2025-32059 High 8.8 Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU 0.4%
  • CVE-2025-32058 Critical 9.3 Stack Overflow in processing requests over INC interface on RH850 side of Infotainment ECU 0.2%
  • CVE-2025-32057 Medium 6.5 Misconfigured SSL/TLS communication of Redbend service for Infotainment ECU 0.3%
  • CVE-2025-32056 Medium 4.0 Anti-Theft Bypass for Infotainment ECU 0.3%
  • CVE-2023-32228 Medium 4.6 A firmware bug which may lead to misinterpretation of data in the AMC2-4WCF and AMC2-2WCF allowing an adversary to grant access to the last authorized user. 0.2%
  • CVE-2023-32228 Medium 4.6 A firmware bug which may lead to misinterpretation of data in the AMC2-4WCF and AMC2-2WCF allowing an adversary to grant access to the last authorized user. 0.2%
  • CVE-2024-25002 High 8.8 Command Injection in the diagnostics interface of the Bosch Network Synchronizer allows unauthorized users full access to the device. 1.2%
  • CVE-2024-25002 High 8.8 Command Injection in the diagnostics interface of the Bosch Network Synchronizer allows unauthorized users full access to the device. 1.2%
  • CVE-2023-49722 High 8.3 Network port 8899 open in WiFi firmware of BCC101/BCC102/BCC50 products, that allows an attacker to connect to the device via same WiFi network. 0.4%
  • CVE-2023-49722 High 8.3 Network port 8899 open in WiFi firmware of BCC101/BCC102/BCC50 products, that allows an attacker to connect to the device via same WiFi network. 0.4%
  • CVE-2023-49722 High 8.3 Network port 8899 open in WiFi firmware of BCC101/BCC102/BCC50 products, that allows an attacker to connect to the device via same WiFi network. 0.4%
  • CVE-2022-41677 Medium 5.3 An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information (like capabilities) about the device itself and network s 0.6%
  • CVE-2023-35867 Medium 5.9 An improper handling of a malformed API answer packets to API clients in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service (DoS) situation. To exploit this 0.6%
  • CVE-2023-35867 Medium 5.9 An improper handling of a malformed API answer packets to API clients in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service (DoS) situation. To exploit this 0.6%
  • CVE-2023-35867 Medium 5.9 An improper handling of a malformed API answer packets to API clients in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service (DoS) situation. To exploit this 0.6%