Skip to content
OpenAdvisories

Vendor

Bosch

73 known vulnerabilities.

Products

BVMS 9 DIVAR IP all-in-one 5000 9 CPP Firmware 8 Infotainment system ECU 8 Smart Home Controller 6 DIVAR IP 7000 R2 6 DIVAR IP all-in-one 7000 6 BVMS Viewer 6 BIS 5 DIVAR IP 3000 4 DIVAR IP 7000 4 VRM 4 Camera Firmware 4 AMS 3 APE 3 VJD-7513 3 Video Streaming Gateway 3 DIVAR IP all-in-one 4000 3 DIVAR IP all-in-one 6000 3 PRA-ES8P2S 3 PRAESIDEO 2 PRAESENSA 2 Bosch Video Management System 2 B426 Firmware 2 VIDEOJET multi 4000 2 AMC2 2 Configuration Manager 2 Access Professional Edition 2 Video Recording Manager 2 BF-OS 2 Bosch DIVAR IP all-in-one 7000 R3 2 Bosch DIVAR IP 7000 R2 2 Bosch DIVAR IP all-in-one 5000 2 Bosch DIVAR IP all-in-one 7000 2 FSM-2500 2 FSM-5000 2 Monitor Wall 1 B420 1 BVMS Mobile Video Service 1 IoT Gateway Software 1
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 9.3
    CVE-2025-32058

    Stack Overflow in processing requests over INC interface on RH850 side of Infotainment ECU

    The Infotainment ECU manufactured by Bosch uses a RH850 module for CAN communication. RH850 is connected to infotainment over the INC interface through a custom protocol. There is a vulnerability during processing requests of this protocol on the V850 side wh…

    Bosch Infotainment system ECU
  • Critical 9.8
    CVE-2022-36301

    BF-OS version 3.x up to and including 3.83 do not enforce strong passwords which may allow a remote attacker to brute-f…

    Bosch BF-OS
  • Critical 9.1
    CVE-2021-23859

    Denial of Service and Authentication Bypass Vulnerability in multiple Bosch products

    An unauthenticated attacker is able to send a special HTTP request, that causes a service to crash. In case of a standalone VRM or BVMS with VRM installation this crash also opens the possibility to send further unauthenticated commands to the service. On som…

    Bosch BVMS DIVAR IP all-in-one 5000 DIVAR IP 7000 R2
  • Critical 9.8
    CVE-2021-23847

    Unauthenticated Information Extraction Vulnerability

    A Missing Authentication in Critical Function in Bosch IP cameras allows an unauthenticated remote attacker to extract sensitive information or change settings of the camera by sending crafted requests to the device. Only devices of the CPP6, CPP7 and CPP7.3 …

    Bosch CPP Firmware
  • Critical 10.0
    CVE-2020-6779

    Hard-coded Credentials in the Database of Bosch FSM-2500 Server and Bosch FSM-5000 Server

    Use of Hard-coded Credentials in the database of Bosch FSM-2500 server and Bosch FSM-5000 server up to and including version 5.2 allows an unauthenticated remote attacker to log into the database with admin-privileges. This may result in complete compromise o…

    Bosch FSM-2500 FSM-5000
  • Critical 9.3
    CVE-2020-6774

    Kiosk Mode Breakout in Bosch Recording Station

    Improper Access Control in the Kiosk Mode functionality of Bosch Recording Station allows a local unauthenticated attacker to escape from the Kiosk Mode and access the underlying operating system.

    Bosch Bosch Recording Station
  • Critical 10.0
    CVE-2020-6770

    Deserialization of Untrusted Data in Bosch BVMS Mobile Video Service

    Deserialization of Untrusted Data in the BVMS Mobile Video Service (BVMS MVS) allows an unauthenticated remote attacker to execute arbitrary code on the system. This affects Bosch BVMS versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.0.329 and 7.5 a…

    Bosch DIVAR IP 7000 DIVAR IP 3000 BVMS Mobile Video Service
  • Critical 10.0
    CVE-2020-6769

    Missing Authentication for Critical Function in Bosch Video Streaming Gateway

    Missing Authentication for Critical Function in the Bosch Video Streaming Gateway (VSG) allows an unauthenticated remote attacker to retrieve and set arbitrary configuration data of the Video Streaming Gateway. A successful attack can impact the confidentiali…

    Bosch DIVAR IP all-in-one 5000 DIVAR IP 3000 DIVAR IP 7000
  • Critical 9.9
    CVE-2019-11898

    Unauthorized APE administration privileges can be achieved by reverse engineering one of the APE service tools. The ser…

    Bosch Access Professional Edition