CVE-2023-28175: Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the...
7.1
CVSS
Description
Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal network via a port forwarding request.
Classification
CVE ID: CVE-2023-28175
CVSS Base Severity: HIGH
CVSS Base Score: 7.1
Affected Products
Vendor: Bosch
Product: BVMS
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.09% (probability of being exploited)
EPSS Percentile: 40.31% (scored less or equal to compared to others)
EPSS Date: 2025-02-04 (when was this score calculated)