Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2023-28175

Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal network via a port for

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
bosch

Description

Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal network via a port forwarding request.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bosch BVMS

  • 7.5 to ≤ 11.1.1affected

Bosch BVMS Viewer

  • 7.5 to ≤ 11.1.1affected

Bosch Bosch DIVAR IP 3000

  • 7.5 to ≤ 8.0affected

Bosch Bosch DIVAR IP 7000 R1

  • 7.5 to ≤ 8.0affected

Bosch Bosch DIVAR IP 7000 R2

  • 7.5 to ≤ 11.1.1affected

Bosch Bosch DIVAR IP all-in-one 7000 R3

  • 10.1.1 to ≤ 11.1.1affected

Bosch Bosch DIVAR IP all-in-one 5000

  • 9.0 to ≤ 11.1.1affected

Bosch Bosch DIVAR IP all-in-one 7000

  • 9.0 to ≤ 11.1.1affected

Bosch DIVAR IP all-in-one 4000

  • 11.1.1affected

Bosch DIVAR IP all-in-one 6000

  • 11.1.1affected

References