Divar Ip 7000 R2 Firmware

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-35867 Dec 18, 13:15 MEDIUM This Month

An improper handling of a malformed API answer packets to API clients in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service (DoS) situation. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Denial Of Service Configuration Manager Bosch Video Management System Video Management System Viewer Divar Ip 7000 R2 Firmware +11

NVD

CVSS 3.1

5.9

EPSS

0.6%

CVE-2023-28175 Jun 15, 11:15 HIGH This Week

Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal network via a port forwarding request. Rated high severity (CVSS 7.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Video Management System Divar Ip 5000 Firmware Video Management System Viewer Divar Ip 3000 Firmware +6

NVD

CVSS 3.1

7.7

EPSS

0.5%

CVE-2023-35867

EPSS 1% CVSS 5.9

MEDIUM This Month

Denial Of Service Configuration Manager Bosch Video Management System +13

NVD

CVE-2023-28175

EPSS 0% CVSS 7.7

HIGH This Week

Information Disclosure Video Management System Divar Ip 5000 Firmware +8

NVD