Bosch Divar IP 5000 Firmware vulnerabilities

5 CVEs affecting Bosch Divar IP 5000 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-28175, published 2023-06-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-6769, published 2020-02-07. Critical severity, CVSS 9.1. EPSS: 2.2% chance of exploitation in the next 30 days. Missing Authentication for Critical Function in the Bosch Video Streaming Gateway (VSG) allows an unauthenticated remote attacker to retrieve and set arbitrary configuration data of the Video…
CVE-2019-8952, published 2019-05-13. Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days. A Path Traversal vulnerability located in the webserver affects several Bosch hardware and software products. The vulnerability potentially allows a remote authorized user to access arbitrary files…
CVE-2019-8951, published 2019-05-13. Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days. An Open Redirect vulnerability located in the webserver affects several Bosch hardware and software products. The vulnerability potentially allows a remote attacker to redirect users to an arbitrary…
CVE-2019-11684, published 2021-02-26. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. Improper Access Control in the RCP+ server of the Bosch Video Recording Manager (VRM) component allows arbitrary and unauthenticated access to a limited subset of certificates, stored in the…
CVE-2023-28175, published 2023-06-15. High severity, CVSS 7.7. EPSS: 0.5% chance of exploitation in the next 30 days. Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal network via a port forwarding request.