Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal network via a port forwarding request.
https://psirt.bosch.com/security-advisories/BOSCH-SA-025794-bt.html