← volver
CVE-2023-28175

CVE-2023-28175

CVSS 7.1 HIGHEPSS 0.5%CWE-200
Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal network via a port forwarding request.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
Productos afectados
Bosch · Bosch DIVAR IP 3000Bosch · Bosch DIVAR IP 7000 R1Bosch · Bosch DIVAR IP 7000 R2Bosch · Bosch DIVAR IP all-in-one 5000Bosch · Bosch DIVAR IP all-in-one 7000Bosch · Bosch DIVAR IP all-in-one 7000 R3Bosch · BVMSBosch · BVMS ViewerBosch · DIVAR IP all-in-one 4000Bosch · DIVAR IP all-in-one 6000

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
https://psirt.bosch.com/security-advisories/BOSCH-SA-025794-bt.html