Bosch BVMS

• CVE-2024-33618 High 7.5 Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1 allows attackers to consume excessive amounts of disk space via network interface. 0.5%
• CVE-2023-35867 Medium 5.9 An improper handling of a malformed API answer packets to API clients in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service (DoS) situation. To exploit this 0.6%
• CVE-2023-28175 High 7.1 Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal network via a port forwarding request. 0.5%
• CVE-2022-32540 High 7.4 Information Disclosure in Operator Client application in BVMS 10.1.1, 11.0 and 11.1.0 and VIDEOJET Decoder VJD-7513 versions 10.23 and 10.30 allows man-in-the-middle attacker to compromise confidentia 0.4%
• CVE-2021-23862 High 7.2 Authenticated Remote Code Execution 1.4%
• CVE-2021-23861 Medium 6.5 Possible Access to Debug Functions in Bosch VRM / BVMS 0.8%
• CVE-2021-23860 Medium 5.0 Reflected Cross Site Scripting (XSS) vulnerability in Bosch VRM / BVMS 0.5%
• CVE-2021-23859 Critical 9.1 Denial of Service and Authentication Bypass Vulnerability in multiple Bosch products 1.0%
• CVE-2020-6785 High 7.8 Uncontrolled Search Path Element in Bosch BVMS and BVMS Viewer 0.3%