Bosch Divar IP 3000 Firmware vulnerabilities

2 CVEs affecting Bosch Divar IP 3000 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-28175, published 2023-06-15.

More from Bosch.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-6770, published 2020-02-07. Critical severity, CVSS 9.8. EPSS: 3.6% chance of exploitation in the next 30 days. Deserialization of Untrusted Data in the BVMS Mobile Video Service (BVMS MVS) allows an unauthenticated remote attacker to execute arbitrary code on the system. This affects Bosch BVMS versions 10.0…
• CVE-2023-28175, published 2023-06-15. High severity, CVSS 7.7. EPSS: 0.5% chance of exploitation in the next 30 days. Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal network via a port forwarding request.