Unrated severityNVD Advisory· Published Jun 15, 2023· Updated Dec 17, 2024

CVE-2023-28175

Description

Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal network via a port forwarding request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Digital Project/Vmsllm-fuzzy
Range: 11.0, 11.1.0, 11.1.1
Bosch/Divar IP 3000cpe-rescue
Range: 7.5
Bosch/Bosch DIVAR IP 7000 R1v5
Range: 7.5
Bosch/Bosch DIVAR IP 7000 R2v5
Range: 7.5
Bosch/Divar IP All In One 5000cpe-rescue5 versions
9.0+ 4 more
- (no CPE)range: 9.0
- (no CPE)range: 9.0
- (no CPE)range: 10.1.1
- (no CPE)range: 11.1.1
- (no CPE)range: 11.1.1
Bosch/BVMScpe-rescue
Range: 7.5
Bosch/BVMS Viewercpe-rescue
Range: 7.5

Patches

Vulnerability mechanics

References

psirt.bosch.com/security-advisories/BOSCH-SA-025794-bt.htmlmitrevendor-advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000