Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal network via a port forwarding request.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
BVMS
Vendor
Bosch
Product
BVMS
Platforms
Unknown
Default status
Unknown
BVMS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.5
affected
custom
Unavailable
11.1.1
None listed
BVMS Viewer
Vendor
Bosch
Product
BVMS Viewer
Platforms
Unknown
Default status
Unknown
BVMS Viewer · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.5
affected
custom
Unavailable
11.1.1
None listed
Bosch DIVAR IP 3000
Vendor
Bosch
Product
Bosch DIVAR IP 3000
Platforms
Unknown
Default status
Unknown
Bosch DIVAR IP 3000 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.5
affected
custom
Unavailable
8.0
None listed
Bosch DIVAR IP 7000 R1
Vendor
Bosch
Product
Bosch DIVAR IP 7000 R1
Platforms
Unknown
Default status
Unknown
Bosch DIVAR IP 7000 R1 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.5
affected
custom
Unavailable
8.0
None listed
Bosch DIVAR IP 7000 R2
Vendor
Bosch
Product
Bosch DIVAR IP 7000 R2
Platforms
Unknown
Default status
Unknown
Bosch DIVAR IP 7000 R2 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
7.5
affected
custom
Unavailable
11.1.1
None listed
Bosch DIVAR IP all-in-one 7000 R3
Vendor
Bosch
Product
Bosch DIVAR IP all-in-one 7000 R3
Platforms
Unknown
Default status
Unknown
Bosch DIVAR IP all-in-one 7000 R3 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
10.1.1
affected
custom
Unavailable
11.1.1
None listed
Bosch DIVAR IP all-in-one 5000
Vendor
Bosch
Product
Bosch DIVAR IP all-in-one 5000
Platforms
Unknown
Default status
Unknown
Bosch DIVAR IP all-in-one 5000 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
9.0
affected
custom
Unavailable
11.1.1
None listed
Bosch DIVAR IP all-in-one 7000
Vendor
Bosch
Product
Bosch DIVAR IP all-in-one 7000
Platforms
Unknown
Default status
Unknown
Bosch DIVAR IP all-in-one 7000 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
9.0
affected
custom
Unavailable
11.1.1
None listed
DIVAR IP all-in-one 4000
Vendor
Bosch
Product
DIVAR IP all-in-one 4000
Platforms
Unknown
Default status
Unknown
DIVAR IP all-in-one 4000 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
11.1.1
affected
Unavailable
Unavailable
Unavailable
None listed
DIVAR IP all-in-one 6000
Vendor
Bosch
Product
DIVAR IP all-in-one 6000
Platforms
Unknown
Default status
Unknown
DIVAR IP all-in-one 6000 · Scoped product and version facts