VYPR

Divar IP 3000 Firmware

by Bosch

CVEs (2)

  • CVE-2020-6770CriFeb 7, 2020
    risk 0.65cvss 10.0epss 0.04

    Deserialization of Untrusted Data in the BVMS Mobile Video Service (BVMS MVS) allows an unauthenticated remote attacker to execute arbitrary code on the system. This affects Bosch BVMS versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.0.329 and 7.5 and older. This…

  • CVE-2023-28175HigJun 15, 2023
    risk 0.46cvss 7.1epss 0.00

    Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal network via a port forwarding request.