Bosch Divar IP 2000 Firmware vulnerabilities

3 CVEs affecting Bosch Divar IP 2000 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-6769, published 2020-02-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-6769, published 2020-02-07. Critical severity, CVSS 9.1. EPSS: 2.2% chance of exploitation in the next 30 days. Missing Authentication for Critical Function in the Bosch Video Streaming Gateway (VSG) allows an unauthenticated remote attacker to retrieve and set arbitrary configuration data of the Video…
CVE-2019-8952, published 2019-05-13. Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days. A Path Traversal vulnerability located in the webserver affects several Bosch hardware and software products. The vulnerability potentially allows a remote authorized user to access arbitrary files…
CVE-2019-8951, published 2019-05-13. Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days. An Open Redirect vulnerability located in the webserver affects several Bosch hardware and software products. The vulnerability potentially allows a remote attacker to redirect users to an arbitrary…