Advisories · Technology

Bosch DIVAR IP all-in-one 7000.

Every CVE that names Bosch DIVAR IP all-in-one 7000 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-33618 CVE record

CVSS 7.5 High

Uncontrolled resource consumption in Bosch BVMS and others
- Bosch BVMS
- Bosch BVMS Viewer
- Denial of service
Not analysed yet 15 Apr 2026
CVE-2023-35867 CVE record

CVSS 5.9 Medium

An improper handling of a malformed API answer packets to API clients in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service (DoS) situation.
- Bosch BVMS
- Bosch BVMS Viewer
- CWE-703
Not analysed yet 18 Dec 2023
CVE-2023-28175 CVE record

CVSS 7.1 High

Information disclosure in Bosch BVMS and others
- Bosch BVMS
- Bosch BVMS Viewer
- Information disclosure
Not analysed yet 15 Jun 2023
CVE-2021-23862 CVE record

CVSS 7.2 High

Authenticated Remote Code Execution
- Bosch BVMS
- Bosch DIVAR IP 7000 R2
- CWE-20
Not analysed yet 8 Dec 2021
CVE-2021-23861 CVE record

CVSS 6.5 Medium

Possible Access to Debug Functions in Bosch VRM / BVMS
- Bosch BVMS
- Bosch DIVAR IP 7000 R2
- CWE-489
Not analysed yet 8 Dec 2021
CVE-2021-23860 CVE record

CVSS 5.0 Medium

Reflected Cross Site Scripting (XSS) vulnerability in Bosch VRM / BVMS
- Bosch BVMS
- Bosch DIVAR IP 7000 R2
- Cross-site scripting (XSS)
Not analysed yet 8 Dec 2021
CVE-2021-23859 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Denial of Service and Authentication Bypass Vulnerability in multiple Bosch products
- Bosch BVMS
- Bosch DIVAR IP 7000 R2
- CWE-703
Not analysed yet 8 Dec 2021
CVE-2020-6785 CVE record

CVSS 7.8 High

Uncontrolled Search Path Element in Bosch BVMS and BVMS Viewer
- Bosch BVMS
- Bosch BVMS Viewer
- CWE-427
Not analysed yet 25 Mar 2021