Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Missing Authentication for Critical Function in Bosch Video Streaming Gateway
Vulnerability Description
Missing Authentication for Critical Function in the Bosch Video Streaming Gateway (VSG) allows an unauthenticated remote attacker to retrieve and set arbitrary configuration data of the Video Streaming Gateway. A successful attack can impact the confidentiality and availability of live and recorded video data of all cameras configured to be controlled by the VSG as well as the recording storage associated with the VSG. This affects Bosch Video Streaming Gateway versions 6.45 <= 6.45.08, 6.44 <= 6.44.022, 6.43 <= 6.43.0023 and 6.42.10 and older. This affects Bosch DIVAR IP 3000, DIVAR IP 7000 and DIVAR IP all-in-one 5000 if a vulnerable VSG version is installed with BVMS. This affects Bosch DIVAR IP 2000 <= 3.62.0019 and DIVAR IP 5000 <= 3.80.0039 if the corresponding port 8023 has been opened in the device's firewall.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
关键功能的认证机制缺失
Vulnerability Title
Bosch Video Streaming Gateway 访问控制错误漏洞
Vulnerability Description
Bosch DIVAR IP 2000和Bosch DIVAR IP 3000都是德国Bosch公司的产品。Bosch DIVAR IP 2000是一款2000系列视频录像机。Bosch DIVAR IP 3000是一款3000系列视频录像机。 Bosch Video Streaming Gateway（VSG）中存在访问控制错误漏洞，该漏洞源于程序缺少身份验证。攻击者可利用该漏洞检索和设置Video Streaming Gateway的配置数据，影响实时和被录制的视频数据的保密性和可用性。以下产品及版本
CVSS Information
N/A
Vulnerability Type
N/A