CVE-2022-32540: Bosch Video Management System

Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days.

Information Disclosure in Operator Client application in BVMS 10.1.1, 11.0 and 11.1.0 and VIDEOJET Decoder VJD-7513 versions 10.23 and 10.30 allows man-in-the-middle attacker to compromise confidential video stream. This is only applicable for UDP encryption when target system contains cameras with platform CPP13 or CPP14 and firmware version 8.x.

Affected products

• Bosch Bosch Video Management System: from 10.1, up to and including 10.1.1; from 11.1, up to and including 11.1.0; version 11.0 only
• Bosch Videojet Decoder 7513 Firmware: version 10.23.0002 only; version 10.30.0005 only

Published 2022-09-30. Last modified 2026-06-17.