CVE-2022-32540

State: Published
Severity: 7.4 High
Published: Sep 30, 2022
Updated: May 20, 2025
Reserved: Jun 7, 2022

Description

Information Disclosure in Operator Client application in BVMS 10.1.1, 11.0 and 11.1.0 and VIDEOJET Decoder VJD-7513 versions 10.23 and 10.30 allows man-in-the-middle attacker to compromise confidential video stream. This is only applicable for UDP encryption when target system contains cameras with platform CPP13 or CPP14 and firmware version 8.x.

Scores

CVSS	Score	Vector	Source
3.0	7.4 High	CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N	bosch

Weaknesses

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Affected Products

Product	Versions
BVMSBosch	11.1 through 11.1.0Affected 11.0 through 11.0.0Affected 10.1 through 10.1.1Affected
VJD-7513Bosch	10.23.0002Affected 10.30.0005Affected

References

https://psirt.bosch.com/security-advisories/bosch-sa-464066.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.