CVE-2023-28175: high-severity vulnerability in Bosch DIVAR IP 3000
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.1epss 0.5%
Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal network via a port forwarding request.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
Affected products
Bosch · Bosch DIVAR IP 3000Bosch · Bosch DIVAR IP 7000 R1Bosch · Bosch DIVAR IP 7000 R2Bosch · Bosch DIVAR IP all-in-one 5000Bosch · Bosch DIVAR IP all-in-one 7000Bosch · Bosch DIVAR IP all-in-one 7000 R3Bosch · BVMSBosch · BVMS ViewerBosch · DIVAR IP all-in-one 4000Bosch · DIVAR IP all-in-one 6000Related CVEs — Bosch DIVAR IP 3000
In the same product, most dangerous first.