Skip to main content

Security Advisories

Below listed Security Advisories (SA) inform you about identified security vulnerabilities in our product or service and proposed solutions.

 

Security Advisory ID Assigned CVE IDs CVSS* Score Affected Bosch Products Title Publication Date Last Update
Security Advisory ID
KSA-254356
Assigned CVE IDs
  • CVE-2002-20001
 CVSS* Score
7.5
Affected Bosch Products
  • BVMS
  • DIVAR IP all-in-one 4000
  • DIVAR IP all-in-one 5000
  • DIVAR IP all-in-one 6000
  • DIVAR IP all-in-one 7000


 Title
BVMS Unrestricted SSH Resource Consumption
Publication Date
2025-08-27
Last Update
2025-08-27
Security Advisory ID
BOSCH-SA-904062-BT
Assigned CVE IDs
  • n/a
 CVSS* Score
7.8
Affected Bosch Products
  • Bosch DIVAR IP all-in-one 7000 (DIP-72xx)
 Title
Unquoted Service Path Enumeration on SMCWatchDog Agent
Publication Date
2025-01-15
Last Update
2025-01-15
*CVSS - Common Vulnerability Scoring System
Security Advisory ID Assigned CVE IDs CVSS* Score Affected Bosch Products Title Publication Date Last Update
Security Advisory ID
BOSCH-SA-162032-BT
Assigned CVE IDs
  • CVE-2024-33618
 CVSS* Score
7.5
Affected Bosch Products
  • BVMS, BVMS Viewer
  • Bosch DIVAR IP all-in-one 7000 R3
  • Bosch DIVAR IP 7000 R2
  • Bosch DIVAR IP all-in-one 5000
  • Bosch DIVAR IP all-in-one 7000
  • DIVAR IP all-in-one 4000
  • DIVAR IP all-in-one 6000
 Title
Unrestricted resource consumption in BVMS
Publication Date
2024-10-16
Last Update
2024-10-16
Security Advisory ID
BOSCH-SA-981803-BT
Assigned CVE IDs
  • CVE-2024-98763
 CVSS* Score
8.4
Affected Bosch Products
  • Bosch Configuration Manager
 Title
Sensitive information disclosure in Bosch Configuration Manager
Publication Date
2024-10-01
Last Update
2024-10-01
Security Advisory ID
BOSCH-SA-659648-BT
Assigned CVE IDs
  • CVE-2022-98765
 CVSS* Score
7.5
Affected Bosch Products
  • Bosch Camera Firmware
 Title
Unauthenticated information leak in Bosch IP cameras
Publication Date
2024-08-21
Last Update
2024-08-21
Security Advisory ID
BOSCH-SA-587194-BT
Assigned CVE IDs
  • CVE-2023-46218
  • CVE-2023-46219
  • CVE-2024-2004
  • CVE-2024-2398
 CVSS* Score
8.6
Affected Bosch Products
  • Bosch DIVAR IP all-in-one 4000 (DIP-44xx)
  • Bosch DIVAR IP all-in-one 6000 (DIP-64xx)
  • Bosch DIVAR IP all-in-one 7000 (DIP-74xx)
  • Bosch DIVAR IP all-in-one 7000 R3 (DIP-73xx)
  • Bosch DIVAR IP all-in-one 7000 (DIP-72xx)
  • Bosch DIVAR IP all-in-one 5000 (DIP-52xx)
 Title
Multiple Curl vulnerabilities in the Git for Windows component of Bosch DIVAR IP all-in-one Devices
Publication Date
2024-08-07
Last Update
2024-08-07
Security Advisory ID
BOSCH-SA-246962-BT
Assigned CVE IDs
  • CVE-2021-27033
  • CVE-2021-27034
  • CVE-2021-27035
  • CVE-2021-27036
  • CVE-2021-27037
  • CVE-2021-27038
  • CVE-2021-27039
 CVSS* Score
7.8
Affected Bosch Products
  • Bosch BVMS
  • Bosch BVMS Viewer
  • Bosch DIVAR IP 7000 R2
  • Bosch DIVAR IP all-in-one 5000
  • Bosch DIVAR IP all-in-one 7000
  • Bosch DIVAR IP all-in-one 7000 R3
 Title
BVMS affected by Autodesk Design Review Multiple Vulnerabilities
Publication Date
2024-03-13
Last Update
2024-03-13
Security Advisory ID
BOSCH-SA-090577-BT
Assigned CVE IDs
  • Multiple CVEs in 3rd party components
 CVSS* Score
9.8
Affected Bosch Products
  • Bosch BVMS
  • Bosch BVMS Viewer
  • Bosch DIVAR IP 7000 R2
  • Bosch DIVAR IP all-in-one 5000
  • Bosch DIVAR IP all-in-one 7000
  • Bosch DIVAR IP all-in-one 7000 R3
  • Bosch DIVAR IP all-in-one 4000
  • Bosch DIVAR IP all-in-one 6000
 Title
Multiple OpenSSL vulnerabilities in BVMS
Publication Date
2024-03-06
Last Update
2024-03-06
Security Advisory ID
BOSCH-SA-637386-BT
Assigned CVE IDs
  • Multiple CVEs in 3rd party components
 CVSS* Score
9.8
Affected Bosch Products
  • Bosch DIVAR IP all-in-one 4000 (DIP-44xx)
  • Bosch DIVAR IP all-in-one 5000 (DIP-52xx)
  • Bosch DIVAR IP all-in-one 6000 (DIP-64xx)
  • Bosch DIVAR IP all-in-one 7000 (DIP-72xx)
  • Bosch DIVAR IP all-in-one 7000 R3 (DIP-73xx)
 Title
Git for Windows Multiple Security Vulnerabilities in Bosch DIVAR IP all-in-one Devices
Publication Date
2024-03-06
Last Update
2024-03-06
*CVSS - Common Vulnerability Scoring System
Security Advisory ID Assigned CVE IDs CVSS* Score Affected Bosch Products Title Publication Date Last Update
Security Advisory ID
BOSCH-SA-638184-BT
Assigned CVE IDs
  • CVE-2023-39509
 CVSS* Score
7.2
Affected Bosch Products
  • Bosch Camera Firmware
 Title
Command injection vulnerability in Bosch IP Cameras
Publication Date
2023-12-13
Last Update
2023-12-13
Security Advisory ID
BOSCH-SA-092656-BT
Assigned CVE IDs
  • CVE-2023-32230
  • CVE-2023-35867
 CVSS* Score
7.5
Affected Bosch Products
  • Bosch BIS Video Engine
  • Bosch BVMS
  • Bosch BVMS Viewer
  • Bosch Configuration Manager
  • Bosch DIVAR IP 7000 R2
  • Bosch DIVAR IP all-in-one 4000
  • Bosch DIVAR IP all-in-one 5000
  • Bosch DIVAR IP all-in-one 6000
  • Bosch DIVAR IP all-in-one 7000
  • Bosch DIVAR IP all-in-one 7000 R3
  • Bosch Intelligent Insights
  • Bosch Monitorwall
  • Bosch Project Assistant
  • Bosch VJD-7513
  • Bosch VJD-7523
  • Bosch Video Recording Manager
  • Bosch Video Security Client
  • Bosch Video Streaming Gateway
 Title
Denial of Service vulnerability in Bosch BT software products
Publication Date
2023-12-13
Last Update
2023-12-13
Security Advisory ID
BOSCH-SA-839739-BT
Assigned CVE IDs
  • CVE-2022-41677
 CVSS* Score
5.3
Affected Bosch Products
  • Bosch Camera Firmware
 Title
Information Disclosure Vulnerability in Bosch IP cameras
Publication Date
2023-06-28
Last Update
2023-12-13
Security Advisory ID
BOSCH-SA-435698-BT
Assigned CVE IDs
  • CVE-2023-32229
 CVSS* Score
4.9
Affected Bosch Products
  • Bosch Camera Firmware
 Title
Possible damage of secure element in Bosch IP cameras
Publication Date
2023-05-31
Last Update
2023-05-31
Security Advisory ID
BOSCH-SA-110112-BT
Assigned CVE IDs
  • CVE-2021-26701
 CVSS* Score
9.8
Affected Bosch Products
  • Bosch AMS
  • Bosch BIS
  • Bosch BVMS
  • Bosch BVMS Viewer
  • Bosch DIVAR IP 7000 R2
  • Bosch DIVAR IP all-in-one 5000
  • Bosch DIVAR IP all-in-one 7000
  • Bosch DIVAR IP all-in-one 7000 R3
  • Bosch DIVAR IP all-in-one 4000
  • Bosch DIVAR IP all-in-one 6000
 Title
.NET Remote Code Execution Vulnerability in BVMS, BIS and AMS
Publication Date
2023-05-24
Last Update
2023-05-24
Security Advisory ID
BOSCH-SA-025794-BT
Assigned CVE IDs
  • CVE-2023-28175
 CVSS* Score
7.1
Affected Bosch Products
  • Bosch BVMS
  • Bosch BVMS Viewer
  • Bosch DIVAR IP 3000
  • Bosch DIVAR IP 7000 R1
  • Bosch DIVAR IP 7000 R2
  • Bosch DIVAR IP all-in-one 5000
  • Bosch DIVAR IP all-in-one 7000
  • Bosch DIVAR IP all-in-one 7000 R3
  • Bosch DIVAR IP all-in-one 4000
  • Bosch DIVAR IP all-in-one 6000
 Title
Unrestricted SSH port forwarding in BVMS
Publication Date
2023-05-24
Last Update
2023-05-24
*CVSS - Common Vulnerability Scoring System