CVE:CVE-2023-28175
CNNVD:CNNVD-202306-1186
Bosch Video Management System是德国博世（Bosch）公司的一套视频管理系统。
Bosch Video Management System存在安全漏洞，该漏洞源于SSH服务器授权不当，导致经过身份验证的攻击者可以通过端口转发请求访问内部网络中的资源。受影响的产品和版本：Bosch VMS 11.0版本，11.1.0版本，11.1.1版本。
solution:Upgrade bosch video_management_system to a higher version than 11.1.1,and avoid the version [7.5,11.1.1]; Upgrade bosch video_management_system_viewer to a higher version than 11.1.1,and avoid the version [7.5,11.1.1]; Upgrade bosch divar_ip_3000_firmware to a higher version than 8.0,and avoid the version [7.5,8.0]; Upgrade bosch divar_ip_6000_firmware to a higher version than 11.1.1,and avoid the version 11.1.1; Upgrade bosch divar_ip_4000_firmware to a higher version than 11.1.1,and avoid the version 11.1.1; Upgrade bosch divar_ip_5000_firmware to a higher version than 11.1.1,and avoid the version [9.0,11.1.1]; Upgrade bosch divar_ip_7000_r2_firmware to a higher version than 11.1.1,and avoid the version [7.5,11.1.1]; Upgrade bosch divar_ip_7000_firmware to a higher version than 8.0,and avoid the version [7.5,8.0]; Upgrade bosch divar_ip_7000_r3_firmware to a higher version than 11.1.1,and avoid the version [10.1.1,11.1.1]