Information disclosure in Bosch BVMS
Priority LOW 29CWE-200Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- High
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-200.
Summary
Information Disclosure in Operator Client application in BVMS 10.1.1, 11.0 and 11.1.0 and VIDEOJET Decoder VJD-7513 versions 10.23 and 10.30 allows man-in-the-middle attacker to compromise confidential video stream. This is only applicable for UDP encryption when target system contains cameras with platform CPP13 or CPP14 and firmware version 8.x.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00374 31st percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Bosch | BVMS | 11.1 – 11.1.0; 11.0 – 11.0.0; 10.1 – 10.1.1 | — | No fix listed | CNA |
| Bosch | VJD-7513 | 10.23.0002; 10.30.0005 | — | No fix listed | CNA |
- BVMS VendorBosch Affected 11.1 – 11.1.0; 11.0 – 11.0.0; 10.1 – 10.1.1 Fixed in — No fix listed CNA
- VJD-7513 VendorBosch Affected 10.23.0002; 10.30.0005 Fixed in — No fix listed CNA
CPE configurations NVD · 5
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:bosch:bosch_video_management_system:*:*:*:*:*:*:*:* | 10.1 – 10.1.1; 11.1 – 11.1.0 | Vulnerable | Bosch |
| cpe:2.3:a:bosch:bosch_video_management_system:11.0:*:*:*:*:*:*:* | 11.0 | Vulnerable | Bosch |
| cpe:2.3:o:bosch:videojet_decoder_7513_firmware:10.23.0002:*:*:*:*:*:*:* | 10.23.0002 | Vulnerable | Bosch |
| cpe:2.3:o:bosch:videojet_decoder_7513_firmware:10.30.0005:*:*:*:*:*:*:* | 10.30.0005 | Vulnerable | Bosch |
| cpe:2.3:h:bosch:videojet_decoder_7513:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Bosch |
- cpe:2.3:a:bosch:bosch_video_management_system:*:*:*:*:*:*:*:* Versions 10.1 – 10.1.1; 11.1 – 11.1.0 Vulnerable ·Bosch
- cpe:2.3:a:bosch:bosch_video_management_system:11.0:*:*:*:*:*:*:* Versions 11.0 Vulnerable ·Bosch
- cpe:2.3:o:bosch:videojet_decoder_7513_firmware:10.23.0002:*:*:*:*:*:*:* Versions 10.23.0002 Vulnerable ·Bosch
- cpe:2.3:o:bosch:videojet_decoder_7513_firmware:10.30.0005:*:*:*:*:*:*:* Versions 10.30.0005 Vulnerable ·Bosch
- cpe:2.3:h:bosch:videojet_decoder_7513:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2022-32540
- 2026-10-03 Alias added: GHSA-4wx7-2657-7ph3
References
More Bosch Video Management System vulnerabilities
- TI-2019-04894 Buffer Overflow for Bosch Video Systems, PSIM and Access Control Systems CVSS 3.1CRITICAL 9.8
- TI-2019-04895 Improper Access Control for Bosch Video Systems, PSIM and Access Control Systems CVSS 3.1CRITICAL 9.1
- TI-2021-06222 Denial of Service and Authentication Bypass Vulnerability in multiple Bosch products CVSS 3.1CRITICAL 9.1
- TI-2021-06225 Authenticated remote code execution in Bosch BVMS CVSS 3.1HIGH 7.2
- TI-2021-06224 Possible Access to Debug Functions in Bosch VRM / BVMS CVSS 3.1MEDIUM 6.5
- TI-2021-06223 Reflected Cross Site Scripting (XSS) vulnerability in Bosch VRM / BVMS CVSS 3.1MEDIUM 6.1
Sources
- CVE-2022-32540 · CVE Program
- CVE-2022-32540 · NVD
- FIRST EPSS
- GHSA-4wx7-2657-7ph3 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences