high7.1
CVE-2023-28175
Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal n…
Impact
Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal network via a port forwarding request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bosch | Video Management System | from 7.5 through 11.1.1 |
| Bosch | Video Management System Viewer | from 7.5 through 11.1.1 |
| Bosch | Divar Ip 3000 Firmware | from 7.5 through 8.0 |
| Bosch | Divar Ip 6000 Firmware | Version 11.1.1 |
| Bosch | Divar Ip 4000 Firmware | Version 11.1.1 |
| Bosch | Divar Ip 5000 Firmware | from 9.0 through 11.1.1 |
| Bosch | Divar Ip 7000 R2 Firmware | from 7.5 through 11.1.1 |
| Bosch | Divar Ip 7000 Firmware | from 7.5 through 8.0 |
| Bosch | Divar Ip 7000 R3 Firmware | from 10.1.1 through 11.1.1 |