Description
Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal network via a port forwarding request.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Bosch | BVMS | 7.5 – ≤ 11.1.1 | — |
| Bosch | BVMS Viewer | 7.5 – ≤ 11.1.1 | — |
| Bosch | Bosch DIVAR IP 3000 | 7.5 – ≤ 8.0 | — |
| Bosch | Bosch DIVAR IP 7000 R1 | 7.5 – ≤ 8.0 | — |
| Bosch | Bosch DIVAR IP 7000 R2 | 7.5 – ≤ 11.1.1 | — |
| Bosch | Bosch DIVAR IP all-in-one 7000 R3 | 10.1.1 – ≤ 11.1.1 | — |
| Bosch | Bosch DIVAR IP all-in-one 5000 | 9.0 – ≤ 11.1.1 | — |
| Bosch | Bosch DIVAR IP all-in-one 7000 | 9.0 – ≤ 11.1.1 | — |
| Bosch | DIVAR IP all-in-one 4000 | 11.1.1 | — |
| Bosch | DIVAR IP all-in-one 6000 | 11.1.1 | — |