medium5.9
CVE-2022-32540
Information Disclosure in Operator Client application in BVMS 10.1.1, 11.0 and 11.1.0 and VIDEOJET Decoder VJD-7513 versions 10.23 and 10.30 allows man-in-the-…
Impact
Information Disclosure in Operator Client application in BVMS 10.1.1, 11.0 and 11.1.0 and VIDEOJET Decoder VJD-7513 versions 10.23 and 10.30 allows man-in-the-middle attacker to compromise confidential video stream. This is only applicable for UDP encryption when target system contains cameras with platform CPP13 or CPP14 and firmware version 8.x.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bosch | Bosch Video Management System | from 10.1 through 10.1.1 from 11.1 through 11.1.0 Version 11.0 |
| Bosch | Videojet Decoder 7513 Firmware | Versions 10.23.0002, 10.30.0005 |