CVE-2022-32540highCWE-200

CVE-2022-32540: high-severity vulnerability in Bosch BVMS

Published · Updated

Follow this CVE+ Monitor BVMS+ Monitor VJD-7513

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.4epss 0.4%
Information Disclosure in Operator Client application in BVMS 10.1.1, 11.0 and 11.1.0 and VIDEOJET Decoder VJD-7513 versions 10.23 and 10.30 allows man-in-the-middle attacker to compromise confidential video stream. This is only applicable for UDP encryption when target system contains cameras with platform CPP13 or CPP14 and firmware version 8.x.
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected products
Bosch · BVMSBosch · VJD-7513
Related CVEs — Bosch BVMS

In the same product, most dangerous first.

CVE-2021-23862HIGHAuthenticated Remote Code ExecutionEPSS 1.4%CVE-2021-23859CRITICALDenial of Service and Authentication Bypass Vulnerability in multiple Bosch productsEPSS 1.0%CVE-2021-23861MEDIUMPossible Access to Debug Functions in Bosch VRM / BVMSEPSS 0.8%CVE-2023-32230HIGHCVE-2023-32230EPSS 0.7%CVE-2023-35867MEDIUMCVE-2023-35867EPSS 0.6%CVE-2021-23860MEDIUMReflected Cross Site Scripting (XSS) vulnerability in Bosch VRM / BVMSEPSS 0.5%