What’s Vulnerable › Vulnerabilities

CVE-2022-32540

• Severity: medium (CVSS 5.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-09-30 · updated 2026-06-17
• Weakness: CWE-200

Description

Information Disclosure in Operator Client application in BVMS 10.1.1, 11.0 and 11.1.0 and VIDEOJET Decoder VJD-7513 versions 10.23 and 10.30 allows man-in-the-middle attacker to compromise confidential video stream. This is only applicable for UDP encryption when target system contains cameras with platform CPP13 or CPP14 and firmware version 8.x.

Affected products

• Bosch Video Management System: from 10.1 through 10.1.1; from 11.1 through 11.1.0; 11.0
• Bosch Videojet Decoder 7513 Firmware: 10.23.0002, 10.30.0005

References

• https://psirt.bosch.com/security-advisories/bosch-sa-464066.html
• https://psirt.bosch.com/security-advisories/bosch-sa-464066.html

Get alerted when CVE-2022-32540 or the next vulnerability affects your stack