VR
Product
Video Recording Manager
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 4Medium 4Low 0
Watch
Add Video Recording Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-11684 | 9.8 | Feb 26 | Improper Access Control in the RCP+ server of the Bosch Video Recording Manager (VRM) component allows arbitrary and unauthenticated access to a limited subset of certificates,… Affected: 3.70 before 3.71.0034; 3.81 before 3.81.0050 |
| CVE-2019-6957 | 9.8 | May 29 | A recently discovered security vulnerability affects all Bosch Video Management System (BVMS) versions 9.0 and below, DIVAR IP 2000, 3000, 5000 and 7000, Video Recording Manager… Affected: before 3.71.0032; 3.81 before 3.81.0048 |
| CVE-2020-6786 | 7.8 | Mar 25 | Loading a DLL through an Uncontrolled Search Path Element in the Bosch Video Recording Manager installer up to and including version 3.82.0055 for 3.82, up to and including… Affected: through 3.71; 3.81 through 3.81.0064; 3.82 through 3.82.0055 |
| CVE-2023-32230 | 7.5 | Dec 18 | An improper handling of a malformed API request to an API server in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service (DoS) situation Affected: through 04.10.0079 |
| CVE-2021-23859 | 7.5 | Dec 8 | An unauthenticated attacker is able to send a special HTTP request, that causes a service to crash Affected: through 3.81; 3.82 through 3.82.0057; 3.83 through 3.83.0021; 4.0 through 4.00.0070 |
| CVE-2021-23862 | 7.2 | Dec 8 | A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in system context Affected: through 3.81; 3.82 through 3.82.0057; 3.83 through 3.83.0021; 4.0 through 4.00.0070 |
| CVE-2021-23861 | 6.5 | Dec 8 | By executing a special command, an user with administrative rights can get access to extended debug functionality on the VRM allowing an impact on integrity or availability of the… Affected: through 3.81; 3.82 through 3.82.0057; 3.83 through 3.83.0021; 4.0 through 4.00.0070 |
| CVE-2019-8952 | 6.5 | May 13 | A Path Traversal vulnerability located in the webserver affects several Bosch hardware and software products Affected: before 3.71.0032; 3.81 before 3.81.0032 |
| CVE-2021-23860 | 6.1 | Dec 8 | An error in a page handler of the VRM may lead to a reflected cross site scripting (XSS) in the web-based interface Affected: through 3.81; 3.82 through 3.82.0057; 3.83 through 3.83.0021; 4.0 through 4.00.0070 |
| CVE-2019-8951 | 6.1 | May 13 | An Open Redirect vulnerability located in the webserver affects several Bosch hardware and software products Affected: before 3.70.0056; 3.81 before 3.81.0032 |
Showing 10