Bosch Уязвимости

Временная шкала

Тип

Продукт

Bosch BVMS9
Bosch Rexroth ctrlX HMI Web Panel WR217
Bosch Smart Home Controller6
Bosch DIVAR5
Bosch CPP4

Устранение последствий

Official Fix26
Temporary Fix1
Workaround2
Unavailable2
Not Defined57

Эксплуатационная пригодность

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined88

Вектор доступа

Not Defined0
Physical2
Local3
Adjacent12
Network71

Аутентификация

Not Defined0
High8
Low25
None55

Взаимодействие с пользователем

Not Defined0
Required19
None69

C3BM Index

CVSSv3 Base

≤10
≤21
≤31
≤44
≤511
≤613
≤719
≤816
≤919
≤104

CVSSv3 Temp

≤10
≤21
≤31
≤44
≤511
≤615
≤719
≤814
≤919
≤104

VulDB

≤10
≤21
≤33
≤414
≤516
≤612
≤710
≤817
≤912
≤103

NVD

≤10
≤20
≤30
≤42
≤51
≤64
≤77
≤813
≤94
≤108

CNA

≤10
≤20
≤30
≤40
≤54
≤67
≤74
≤811
≤918
≤109

Поставщик

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Эксплойт 0-дня

<1k19
<2k44
<5k25
<10k0
<25k0
<50k0
<100k0
≥100k0

Эксплойт сегодня

<1k74
<2k11
<5k3
<10k0
<25k0
<50k0
<100k0
≥100k0

Объем рынка эксплойтов

🔴 CTI Деятельность

Affected Products (77): AEC (2), AMC2 (2), AMS (1), APE (2), Access Professional Edition (2), B420 (1), B426 (1), B426-CN (2), B426-M (2), B429-CN (2), BCC50 (1), BCC101 (1), BCC102 (1), BF-OS (2), BIS (3), BIS Video Engine (1), BLADEcontrol-WebVIS (2), BVC (2), BVMS (9), BVMS Mobile Video Service (1), BVMS Viewer (2), Building Integration System (1), CCP (1), CPP (4), CPP13 (1), CPP14 (1), Camera (2), Certificate (1), Configuration Manager (2), DIVAR (5), DIVAR IP 2000 (2), DIVAR IP 5000 (3), DIVAR IP 7000 R2 (1), DIVAR IP all-in-one 4000 (1), DIVAR IP all-in-one 5000 (1), DIVAR IP all-in-one 6000 (1), DIVAR IP all-in-one 7000 (1), DIVAR IP all-in-one 7000 R3 (1), FSM-2500 (2), FSM-5000 (2), IP Camera (4), IP Helper (1), Intelligent Insights (1), IoT Gateway Software (4), Monitor Wall (1), Monitorwall (1), Network Synchronizer Enterprise (1), Network Synchronizer Standard (1), ONVIF Camera Event Driver Tool (1), PRA-ES8P2S (3), PRAESENSA (2), PRAESIDEO (2), ProSyst mBS SDK (4), Project Assistant (1), RTS VLink Virtual Matrix Software (1), Recording Station (1), Rexroth IndraLogic XLC (4), Rexroth IndraMotion MLC (4), Smart Camera App (1), Smart Home Camera (1), Smart Home Controller (6), Smart Home System App (1), VDSK (2), VIDEOJET Decoder VJD-7513 (1), VIDEOJET multi 4000 (2), VJD-7513 (1), VJD-7523 (1), VMS (1), VRM (4), VSG (2), Video Client (1), Video Management System (3), Video Recording Manager (3), Video Security (1), Video Security Client (1), Video Streaming Gateway (3), ctrlX HMI Web Panel WR21 (7)

ОпубликованоBaseTempУязвимостиProdЭ�RemEPSSCTICVE
11.04.20244.44.4Bosch AMS/BIS Local Privilege EscalationНеизвестноNot DefinedNot Defined0.000430.08CVE-2023-32228
25.03.20248.88.6Bosch Network Synchronizer Standard Diagnostics Interface эскалация привилегийНеизвестноNot DefinedOfficial Fix0.000430.00CVE-2024-25002
09.01.20247.06.9Bosch BCC101/BCC102/BCC50 WiFi Firmware Remote Code ExecutionНеизвестноNot DefinedOfficial Fix0.000450.08CVE-2023-49722
18.12.20237.57.5Bosch VJD-7523 API Request отказ в обслуживанииНеизвестноNot DefinedNot Defined0.000520.00CVE-2023-32230
18.12.20235.95.9Bosch BVMS API Answer отказ в обслуживанииProject Management SoftwareNot DefinedNot Defined0.000520.00CVE-2023-35867
18.12.20236.36.3Bosch Camera эскалация привилегийНеизвестноNot DefinedNot Defined0.000520.00CVE-2022-41677
18.12.20237.27.2Bosch Camera эскалация привилегийНеизвестноNot DefinedNot Defined0.000450.04CVE-2023-39509
25.10.20234.64.6Bosch Rexroth ctrlX HMI Web Panel WR21 Setting эскалация привилегийSCADA SoftwareNot DefinedNot Defined0.000430.00CVE-2023-41960
25.10.20235.65.6Bosch Rexroth ctrlX HMI Web Panel WR21 Setting эскалация привилегийSCADA SoftwareNot DefinedNot Defined0.000430.02CVE-2023-41372
25.10.20236.56.5Bosch Rexroth ctrlX HMI Web Panel WR21 MQTT слабое шифрованиеSCADA SoftwareNot DefinedNot Defined0.000530.00CVE-2023-46102

78 больше записей не показано

Do you want to use VulDB in your project?

Use the official API to access entries easily!