CVE-2022-32540: Infoleak
First published: Fri Sep 30 2022(Updated: )
Information Disclosure in Operator Client application in BVMS 10.1.1, 11.0 and 11.1.0 and VIDEOJET Decoder VJD-7513 versions 10.23 and 10.30 allows man-in-the-middle attacker to compromise confidential video stream. This is only applicable for UDP encryption when target system contains cameras with platform CPP13 or CPP14 and firmware version 8.x.
Credit: psirt@bosch.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Bosch Bosch Video Management System | >=10.1<=10.1.1 | |
| Bosch Bosch Video Management System | >=11.1<=11.1.0 | |
| Bosch Bosch Video Management System | =11.0 | |
| Bosch Videojet Decoder 7513 Firmware | =10.23.0002 | |
| Bosch Videojet Decoder 7513 Firmware | =10.30.0005 | |
| Bosch Videojet Decoder 7513 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2022-32540?
CVE-2022-32540 is a vulnerability that allows a man-in-the-middle attacker to compromise confidential video streams in the Operator Client application in BVMS 10.1.1, 11.0, and 11.1.0 and VIDEOJET Decoder VJD-7513 versions 10.23 and 10.30.
How does CVE-2022-32540 affect the Bosch Video Management System (BVMS)?
CVE-2022-32540 affects BVMS versions 10.1.1, 11.0, and 11.1.0, allowing a man-in-the-middle attacker to compromise confidential video streams when UDP encryption is used.
Which systems are affected by CVE-2022-32540?
BVMS versions 10.1.1, 11.0, and 11.1.0, as well as VIDEOJET Decoder VJD-7513 versions 10.23 and 10.30, are affected by CVE-2022-32540.
What is the severity of CVE-2022-32540?
CVE-2022-32540 has a severity rating of 5.9 (High).
Is there a fix available for CVE-2022-32540?
Yes, Bosch has released a security advisory with instructions on how to mitigate this vulnerability. Please refer to the following link: [Bosch Security Advisory](https://psirt.bosch.com/security-advisories/bosch-sa-464066.html).
- collector/nvd-index
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/weakness
- agent/description
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/bosch
- canonical/bosch bosch video management system
- version/bosch bosch video management system/10.1
- version/bosch bosch video management system/10.1.1
- version/bosch bosch video management system/11.1
- version/bosch bosch video management system/11.1.0
- version/bosch bosch video management system/11.0
- canonical/bosch videojet decoder 7513 firmware
- version/bosch videojet decoder 7513 firmware/10.23.0002
- version/bosch videojet decoder 7513 firmware/10.30.0005
- canonical/bosch videojet decoder 7513