Bosch Access Professional Edition — known CVE vulnerabilities

Every CVE whose affected-product data names Bosch Access Professional Edition, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2019-6957 — CVSS 9.8 (critical): A recently discovered security vulnerability affects all Bosch Video Management System (BVMS) versions 9.0 and below, DIVAR IP 2000, 3000…
• CVE-2019-6958 — CVSS 9.1 (critical): A recently discovered security vulnerability affects all Bosch Video Management System (BVMS) versions 9.0 and below, DIVAR IP 2000, 3000…
• CVE-2021-23859 — CVSS 9.1 (critical): An unauthenticated attacker is able to send a special HTTP request, that causes a service to crash. In case of a standalone VRM or BVMS…
• CVE-2021-23843 — CVSS 8.8 (high): The Bosch software tools AccessIPConfig.exe and AmcIpConfig.exe are used to configure certains settings in AMC2 devices. The tool allows…
• CVE-2021-23842 — CVSS 5.7 (medium): Communication to the AMC2 uses a state-of-the-art cryptographic algorithm for symmetric encryption called Blowfish. An attacker could…