CVE-2019-8951
An Open Redirect vulnerability located in the webserver affects several Bosch hardware and software products.
Impact
An Open Redirect vulnerability located in the webserver affects several Bosch hardware and software products. The vulnerability potentially allows a remote attacker to redirect users to an arbitrary URL. Affected hardware products: Bosch DIVAR IP 2000 (vulnerable versions: 3.10; 3.20; 3.21; 3.50; 3.51; 3.55; 3.60; 3.61; 3.62; fixed versions: 3.62.0019 and newer), Bosch DIVAR IP 5000 (vulnerable versions: 3.10; 3.20; 3.21; 3.50; 3.51; 3.55; 3.60; 3.61; 3.62; fixed versions: 3.80.0033 and newer). Affected software products: Video Recording Manager (VRM) (vulnerable versions: 3.20; 3.21; 3.50; 3.51; 3.55; 3.60; 3.61; 3.62; fixed versions: 3.70.0056 and newer; 3.81.0032 and newer), Bosch Video Management System (BVMS) (vulnerable versions: 3.50.00XX; 3.55.00XX; 3.60.00XX; fixed versions: 7.5; 3.70.0056).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bosch | Divar Ip 2000 Firmware | before 3.62.0019 |
| Bosch | Divar Ip 5000 Firmware | before 3.80.0033 |
| Bosch | Video Management System | before 3.71.0056 |
| Bosch | Video Recording Manager | before 3.70.0056 from 3.81 before 3.81.0032 |
Weakness classification
References
- NVD record
- CVE.org record
- https://media.boschsecurity.com/fs/media/pb/security_advisories/bosch-2019-0401bt-cve-2019-8951_security_advisory_vrm_open_redirect.pdf
- https://psirt.bosch.com
- https://psirt.bosch.com/Advisory/BOSCH-2019-0401.html
- https://www.boschsecurity.com/xc/en/support/product-security/security-advisories.html
- https://media.boschsecurity.com/fs/media/pb/security_advisories/bosch-2019-0401bt-cve-2019-8951_security_advisory_vrm_open_redirect.pdf
- https://psirt.bosch.com
- https://psirt.bosch.com/Advisory/BOSCH-2019-0401.html
- https://www.boschsecurity.com/xc/en/support/product-security/security-advisories.html