Login Request a demo
BO
Vendor
Bosch
172 products with CVEs on record
400
CVEs
0
On KEV
0
New 30D
Products
NE
Nexo-os
Bosch
9.8
25 CVEs0 on KEV0 new
VR
Video Recording Manager
Bosch
9.8
10 CVEs0 on KEV0 new
BV
Bosch Video Management System
Bosch
9.8
8 CVEs0 on KEV0 new
CF
Cpp13 Firmware
Bosch
9.8
8 CVEs0 on KEV0 new
IS
Infotainment system ECU
Bosch
9.3
8 CVEs0 on KEV0 new
CF
Cpp6 Firmware
Bosch
9.8
7 CVEs0 on KEV0 new
CF
Cpp7.3 Firmware
Bosch
9.8
7 CVEs0 on KEV0 new
CF
Cpp7 Firmware
Bosch
9.8
7 CVEs0 on KEV0 new
VM
Video Management System
Bosch
9.8
7 CVEs0 on KEV0 new
BI
Building Integration System
Bosch
9.8
6 CVEs0 on KEV0 new
SH
Smart Home Controller Firmware
Bosch
8.0
6 CVEs0 on KEV0 new
AP
Access Professional Edition
Bosch
9.8
5 CVEs0 on KEV0 new
CF
Cpp4 Firmware
Bosch
9.8
5 CVEs0 on KEV0 new
DI
Divar IP 5000 Firmware
Bosch
9.8
5 CVEs0 on KEV0 new
VM
Video Management System Viewer
Bosch
7.8
5 CVEs0 on KEV0 new
CM
Configuration Manager
Bosch
9.8
4 CVEs0 on KEV0 new
CF
Cpp14 Firmware
Bosch
8.8
4 CVEs0 on KEV0 new
IG
Iot Gateway Software
Bosch
8.6
4 CVEs0 on KEV0 new
PM
Prosyst Mbs Sdk
Bosch
8.6
4 CVEs0 on KEV0 new
RI
Rexroth Indraworks
Bosch
8.8
4 CVEs0 on KEV0 new
VS
Video Streaming Gateway
Bosch
9.8
4 CVEs0 on KEV0 new
AE
Access Easy Controller Firmware
Bosch
9.8
3 CVEs0 on KEV0 new
DI
Divar IP 2000 Firmware
Bosch
9.1
3 CVEs0 on KEV0 new
PF
Pra-es8p2s Firmware
Bosch
9.8
3 CVEs0 on KEV0 new
RI
Rexroth Indramotion Mlc L20 Firmware
Bosch
9.8
3 CVEs0 on KEV0 new
RI
Rexroth Indramotion Mlc L40 Firmware
Bosch
9.8
3 CVEs0 on KEV0 new
VD
Videojet Decoder 7513 Firmware
Bosch
7.5
3 CVEs0 on KEV0 new
AC
Access
Bosch
9.9
2 CVEs0 on KEV0 new
AM
Access Management System
Bosch
7.8
2 CVEs0 on KEV0 new
AF
Amc2 Firmware
Bosch
7.8
2 CVEs0 on KEV0 new
A7
Autodome 7000 Firmware
Bosch
7.2
2 CVEs0 on KEV0 new
AI
Autodome IP 4000 HD Firmware
Bosch
7.2
2 CVEs0 on KEV0 new
AI
Autodome IP 4000i Firmware
Bosch
7.2
2 CVEs0 on KEV0 new
AI
Autodome IP 5000 HD Firmware
Bosch
7.2
2 CVEs0 on KEV0 new
AI
Autodome IP 5000 IR Firmware
Bosch
7.2
2 CVEs0 on KEV0 new
AI
Autodome IP 5000i Firmware
Bosch
7.2
2 CVEs0 on KEV0 new
AI
Autodome IP Starlight 5000i Firmware
Bosch
7.2
2 CVEs0 on KEV0 new
AI
Autodome IP Starlight 7000i Firmware
Bosch
7.2
2 CVEs0 on KEV0 new
AI
Aviotec IP Starlight 8000 Firmware
Bosch
7.2
2 CVEs0 on KEV0 new
BF
B426 Firmware
Bosch
8.8
2 CVEs0 on KEV0 new
BF
BF-OS
Bosch
7.5
2 CVEs0 on KEV0 new
BL
Bladecontrol-webvis
Bosch
6.4
2 CVEs0 on KEV0 new
BV
Bosch Video Client
Bosch
9.8
2 CVEs0 on KEV0 new
BV
BVMS
Bosch
7.5
2 CVEs0 on KEV0 new
DH
Dinion HD 1080p Firmware
Bosch
7.2
2 CVEs0 on KEV0 new
DH
Dinion HD 1080p Hdr Firmware
Bosch
7.2
2 CVEs0 on KEV0 new
DH
Dinion HD 720p Firmware
Bosch
7.2
2 CVEs0 on KEV0 new
DI
Dinion Imager 9000 HD Firmware
Bosch
7.2
2 CVEs0 on KEV0 new
DI
Dinion IP 3000i Firmware
Bosch
7.2
2 CVEs0 on KEV0 new
DI
Dinion IP 4000 HD Firmware
Bosch
7.2
2 CVEs0 on KEV0 new
DI
Dinion IP 5000 HD Firmware
Bosch
7.2
2 CVEs0 on KEV0 new
DI
Dinion IP 5000 MP Firmware
Bosch
7.2
2 CVEs0 on KEV0 new
DI
Dinion IP Bullet 4000 Firmware
Bosch
7.2
2 CVEs0 on KEV0 new
DI
Dinion IP Bullet 4000i Firmware
Bosch
7.2
2 CVEs0 on KEV0 new
DI
Dinion IP Bullet 5000 Firmware
Bosch
7.2
2 CVEs0 on KEV0 new
DI
Dinion IP Bullet 5000i Firmware
Bosch
7.2
2 CVEs0 on KEV0 new
DI
Dinion IP Bullet 6000i Firmware
Bosch
7.2
2 CVEs0 on KEV0 new
DI
Dinion IP Starlight 6000 Firmware
Bosch
7.2
2 CVEs0 on KEV0 new
DI
Dinion IP Starlight 7000 Firmware
Bosch
7.2
2 CVEs0 on KEV0 new
DI
Dinion IP Starlight 7000 HD Firmware
Bosch
7.2
2 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-56428
BE
BSH ELP (Electronic Platform) Modules
Bosch
8.1
0%
Jul 30The SSH service on BSH ELP (Electronic Platform) modules contains a platform-specific vulnerability due to an improperly secured default configuration
CVE-2024-58330
CF
Camera Firmware
Bosch
7.5
0%
Jul 23A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytics event data
CVE-2024-58023
BC
Bosch Configuration Manager
Bosch
8.4
0%
Jul 23Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to access sensitive information
CVE-2024-33618
DI
DIVAR IP all-in-one 6000
Bosch
7.5
0%
Apr 15Uncontrolled Resource Consumption in Bosch VMS Central Server in Bosch VMS 12.0.1 allows attackers to consume excessive amounts of disk space via network interface
CVE-2025-60038
RI
Rexroth Indraworks
Bosch
8.8
0%
Feb 18A vulnerability has been identified in Rexroth IndraWorks
CVE-2025-60037
RI
Rexroth Indraworks
Bosch
8.8
0%
Feb 18A vulnerability has been identified in Rexroth IndraWorks
CVE-2025-60036
RI
Rexroth Indraworks
Bosch
8.8
0%
Feb 18A vulnerability has been identified in the UA.Testclient utility, which is included in Rexroth IndraWorks
CVE-2025-60035
RI
Rexroth Indraworks
Bosch
8.8
0%
Feb 18A vulnerability has been identified in the OPC.Testclient utility, which is included in Rexroth IndraWorks
CVE-2025-32063
IS
Infotainment system ECU
Bosch
6.8
0%
Feb 15Enabling SSH server on Infotainment ECU
CVE-2025-32062
IS
Infotainment system ECU
Bosch
8.8
0%
Feb 15Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU
CVE-2025-32061
IS
Infotainment system ECU
Bosch
8.8
0%
Feb 15Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU
CVE-2025-32060
IS
Infotainment system ECU
Bosch
6.7
0%
Feb 15Absence of Kernel Module Signature Verification on Linux System of Infotainment ECU
CVE-2025-32059
IS
Infotainment system ECU
Bosch
8.8
0%
Feb 15Stack Buffer Overflow leading to RCE in Bluetooth stack of Infotainment ECU
CVE-2025-32058
IS
Infotainment system ECU
Bosch
9.3
0%
Feb 15Stack Overflow in processing requests over INC interface on RH850 side of Infotainment ECU
CVE-2025-32057
IS
Infotainment system ECU
Bosch
6.5
0%
Jan 22Misconfigured SSL/TLS communication of Redbend service for Infotainment ECU
CVE-2025-32056
IS
Infotainment system ECU
Bosch
4.0
0%
Jan 22Anti-Theft Bypass for Infotainment ECU
CVE-2023-48266
NE
Nexo-os
Bosch
9.8
1%
Jan 10The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network…
CVE-2023-48265
NE
Nexo-os
Bosch
9.8
1%
Jan 10The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network…
CVE-2023-48264
NE
Nexo-os
Bosch
9.8
1%
Jan 10The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network…
CVE-2023-48263
NE
Nexo-os
Bosch
9.8
1%
Jan 10The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network…
CVE-2023-48262
NE
Nexo-os
Bosch
9.8
1%
Jan 10The vulnerability allows an unauthenticated remote attacker to perform a Denial-of-Service (DoS) attack or, possibly, obtain Remote Code Execution (RCE) via a crafted network…
CVE-2023-48261
NE
Nexo-os
Bosch
7.5
1%
Jan 10The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request
CVE-2023-48260
NE
Nexo-os
Bosch
7.5
1%
Jan 10The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request
CVE-2023-48259
NE
Nexo-os
Bosch
7.5
1%
Jan 10The vulnerability allows a remote unauthenticated attacker to read arbitrary content of the results database via a crafted HTTP request
CVE-2023-48258
NE
Nexo-os
Bosch
8.1
0%
Jan 10The vulnerability allows a remote attacker to delete arbitrary files on the file system via a crafted URL or HTTP request through a victim’s session
CVE-2023-48257
NE
Nexo-os
Bosch
8.8
1%
Jan 10The vulnerability allows a remote attacker to access sensitive data inside exported packages or obtain up to Remote Code Execution (RCE) with root privileges on the device
CVE-2023-48256
NE
Nexo-os
Bosch
6.3
0%
Jan 10The vulnerability allows a remote attacker to inject arbitrary HTTP response headers or manipulate HTTP response bodies inside a victim’s session via a crafted URL or HTTP request
CVE-2023-48255
NE
Nexo-os
Bosch
6.1
0%
Jan 10The vulnerability allows an unauthenticated remote attacker to send malicious network requests containing arbitrary client-side script code and obtain its execution inside a…
CVE-2023-48254
NE
Nexo-os
Bosch
6.1
0%
Jan 10The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URL or HTTP request
CVE-2023-48253
NE
Nexo-os
Bosch
8.8
1%
Jan 10The vulnerability allows a remote authenticated attacker to read or update arbitrary content of the authentication database via a crafted HTTP request
CVE-2023-48252
NE
Nexo-os
Bosch
8.8
1%
Jan 10The vulnerability allows an authenticated remote attacker to perform actions exceeding their authorized access via crafted HTTP requests
CVE-2023-48251
NE
Nexo-os
Bosch
9.8
1%
Jan 10The vulnerability allows a remote attacker to authenticate to the SSH service with root privileges through a hidden hard-coded account
CVE-2023-48250
NE
Nexo-os
Bosch
9.8
1%
Jan 10The vulnerability allows a remote attacker to authenticate to the web application with high privileges through multiple hidden hard-coded accounts
CVE-2023-48249
NE
Nexo-os
Bosch
6.5
1%
Jan 10The vulnerability allows an authenticated remote attacker to list arbitrary folders in all paths of the system under the context of the application OS user (“root”) via a crafted…
CVE-2023-48248
NE
Nexo-os
Bosch
5.4
0%
Jan 10The vulnerability allows an authenticated remote attacker to upload a malicious file to the SD card containing arbitrary client-side script code and obtain its execution inside a…
CVE-2023-48247
NE
Nexo-os
Bosch
7.5
1%
Jan 10The vulnerability allows an unauthenticated remote attacker to read arbitrary files under the context of the application OS user (“root”) via a crafted HTTP request
CVE-2023-48246
NE
Nexo-os
Bosch
6.5
1%
Jan 10The vulnerability allows a remote attacker to download arbitrary files in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request
CVE-2023-48245
NE
Nexo-os
Bosch
9.8
1%
Jan 10The vulnerability allows an unauthenticated remote attacker to upload arbitrary files under the context of the application OS user (“root”) via a crafted HTTP request
CVE-2023-48244
NE
Nexo-os
Bosch
6.1
0%
Jan 10The vulnerability allows a remote attacker to inject and execute arbitrary client-side script code inside a victim’s session via a crafted URL or HTTP request
CVE-2023-48243
NE
Nexo-os
Bosch
8.8
1%
Jan 10The vulnerability allows a remote attacker to upload arbitrary files in all paths of the system under the context of the application OS user (“root”) via a crafted HTTP request
CVE-2023-48242
NE
Nexo-os
Bosch
6.5
1%
Jan 10The vulnerability allows an authenticated remote attacker to download arbitrary files in all paths of the system under the context of the application OS user (“root”) via a…
CVE-2023-49722
BF
Bcc101 Firmware
Bosch
6.5
0%
Jan 9Network port 8899 open in WiFi firmware of BCC101/BCC102/BCC50 products, that allows an attacker to connect to the device via same WiFi network
CVE-2023-39509
CF
Cpp13 Firmware
Bosch
7.2
1%
Dec 18A command injection vulnerability exists in Bosch IP cameras that allows an authenticated user with administrative rights to run arbitrary commands on the OS of the camera
CVE-2023-35867
BI
Building Integration System Video Engine
Bosch
5.9
1%
Dec 18An improper handling of a malformed API answer packets to API clients in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service (DoS)…
CVE-2023-32230
MW
Monitor Wall
Bosch
7.5
1%
Dec 18An improper handling of a malformed API request to an API server in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service (DoS) situation
CVE-2022-41677
CF
Cpp14 Firmware
Bosch
5.3
1%
Dec 18An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information (like capabilities) about the device…
CVE-2023-34999
RV
Rts Vlink Virtual Matrix
Bosch
7.2
1%
Sep 18A command injection vulnerability exists in RTS VLink Virtual Matrix Software Versions v5 (< 5.7.6) and v6 (< 6.5.0) that allows an attacker to perform arbitrary code execution…
CVE-2023-29241
BI
Building Integration System
Bosch
7.1
0%
Jun 30Improper Information in Cybersecurity Guidebook in Bosch Building Integration System (BIS) 5.0 may lead to wrong configuration which allows local users to access data via network
CVE-2023-32229
CF
Cpp13 Firmware
Bosch
6.5
1%
Jun 15Due to an error in the software interface to the secure element chip on Bosch IP cameras of family CPP13 and CPP14, the chip can be permanently damaged when enabling the Stream…
CVE-2023-28175
VM
Video Management System Viewer
Bosch
7.7
0%
Jun 15Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal network via a port…
CVE-2022-47648
BF
B420 Firmware
Bosch
8.8
0%
Feb 8An Improper Access Control vulnerability allows an attacker to access the control panel of the B420 without requiring any sort of authorization or authentication due to the IP…
CVE-2022-40184
VM
VIDEOJET multi 4000
Bosch
4.8
0%
Oct 27Stored Cross Site Scripting (XSS) in VIDEOJET multi 4000
CVE-2022-40183
VM
VIDEOJET multi 4000
Bosch
4.7
0%
Oct 27Reflected Cross Site Scripting (XSS) in VIDEOJET multi 4000
CVE-2022-32540
VJ
VJD-7513
Bosch
5.9
0%
Sep 30Information Disclosure in Operator Client application in BVMS 10.1.1, 11.0 and 11.1.0 and VIDEOJET Decoder VJD-7513 versions 10.23 and 10.30 allows man-in-the-middle attacker to…
CVE-2022-36302
BF
BF-OS
Bosch
5.4
1%
Aug 1File path manipulation vulnerability in BF-OS version 3.00 up to and including 3.83 allows an attacker to modify the file path to access different resources, which may contain…
CVE-2022-36301
BF
BF-OS
Bosch
7.5
1%
Aug 1BF-OS version 3.x up to and including 3.83 do not enforce strong passwords which may allow a remote attacker to brute-force the device password
CVE-2022-32536
PF
Pra-es8p2s Firmware
Bosch
8.8
1%
Jun 23The user access rights validation in the web server of the Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 was insufficient
CVE-2022-32535
PF
Pra-es8p2s Firmware
Bosch
9.8
1%
Jun 23The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 runs its web server with root privilege
CVE-2022-32534
PF
Pra-es8p2s Firmware
Bosch
9.8
2%
Jun 23The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 and earlier was found to be vulnerable to command injection through its diagnostics web interface
CVE-2021-23851
DI
Dinion IP Thermal 8000 Firmware
Bosch
7.2
2%
Mar 30A specially crafted TCP/IP packet may cause the camera recovery image web interface to crash