CVE-2022-32540highCWE-200

CVE-2022-32540: falha de alta gravidade em Bosch BVMS

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar BVMS+ Monitorar VJD-7513

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.4epss 0.4%
Information Disclosure in Operator Client application in BVMS 10.1.1, 11.0 and 11.1.0 and VIDEOJET Decoder VJD-7513 versions 10.23 and 10.30 allows man-in-the-middle attacker to compromise confidential video stream. This is only applicable for UDP encryption when target system contains cameras with platform CPP13 or CPP14 and firmware version 8.x.
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Produtos afetados
Bosch · BVMSBosch · VJD-7513
CVEs relacionadas — Bosch BVMS

No mesmo produto, das mais perigosas para as menos.

CVE-2021-23862HIGHAuthenticated Remote Code ExecutionEPSS 1.4%CVE-2021-23859CRITICALDenial of Service and Authentication Bypass Vulnerability in multiple Bosch productsEPSS 1.0%CVE-2021-23861MEDIUMPossible Access to Debug Functions in Bosch VRM / BVMSEPSS 0.8%CVE-2023-32230HIGHCVE-2023-32230EPSS 0.7%CVE-2023-35867MEDIUMCVE-2023-35867EPSS 0.6%CVE-2021-23860MEDIUMReflected Cross Site Scripting (XSS) vulnerability in Bosch VRM / BVMSEPSS 0.5%