description: Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal network via a port forwarding request.
problem types: CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
affected:
{
vendor: Bosch
product: BVMS
versions:
version: 7.5, status: affected, versionType: custom, lessThanOrEqual: 11.1.1
}
{
vendor: Bosch
product: BVMS Viewer
versions:
version: 7.5, status: affected, versionType: custom, lessThanOrEqual: 11.1.1
}
{
vendor: Bosch
product: Bosch DIVAR IP 3000
versions:
version: 7.5, status: affected, versionType: custom, lessThanOrEqual: 8.0
}
{
vendor: Bosch
product: Bosch DIVAR IP 7000 R1
versions:
version: 7.5, status: affected, versionType: custom, lessThanOrEqual: 8.0
}
{
vendor: Bosch
product: Bosch DIVAR IP 7000 R2
versions:
version: 7.5, status: affected, versionType: custom, lessThanOrEqual: 11.1.1
}
{
vendor: Bosch
product: Bosch DIVAR IP all-in-one 7000 R3
versions:
version: 10.1.1, status: affected, versionType: custom, lessThanOrEqual: 11.1.1
}
{
vendor: Bosch
product: Bosch DIVAR IP all-in-one 5000
versions:
version: 9.0, status: affected, versionType: custom, lessThanOrEqual: 11.1.1
}
{
vendor: Bosch
product: Bosch DIVAR IP all-in-one 7000
versions:
version: 9.0, status: affected, versionType: custom, lessThanOrEqual: 11.1.1
}
{
vendor: Bosch
product: DIVAR IP all-in-one 4000
versions:
version: 11.1.1, status: affected
}
{
vendor: Bosch
product: DIVAR IP all-in-one 6000
versions:
version: 11.1.1, status: affected
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: LOW
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: LOW
availabilityImpact: NONE
baseScore: 7.1
baseSeverity: HIGH
]