High severity · published Mar 25, 2021
CVE-2020-6785
Loading a DLL through an Uncontrolled Search Path Element in Bosch BVMS and BVMS Viewer in versions 10.1.0, 10.0.1, 10.0.0 and 9.0.0 and older potentially allows an attacker to…
7.8
CVSS
0.3%
EPSS
No
On KEV
Description
Loading a DLL through an Uncontrolled Search Path Element in Bosch BVMS and BVMS Viewer in versions 10.1.0, 10.0.1, 10.0.0 and 9.0.0 and older potentially allows an attacker to execute arbitrary code on a victim's system. This affects both the installer as well as the installed application. This also affects Bosch DIVAR IP 7000 R2, Bosch DIVAR IP all-in-one 5000 and Bosch DIVAR IP all-in-one 7000 with installers and installed BVMS versions prior to BVMS 10.1.1.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 27% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VM
Video Management System · Bosch
before 9.0; 10.0 before 10.0.2; 10.1 before 10.1.1; before 9.0; 10.0 before 10.0.2; 10.1 before 10.1.1; +3 more · source: NVD
VM
Video Management System Viewer · Bosch
before 9.0; 10.0 before 10.0.2; 10.1.0 before 10.1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-6785
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-6785
Vendor Advisory
https://psirt.bosch.com/security-advisories/bosch-sa-835563-bt.html
More from Video Management System
9.8
CVE-2019-11684
Improper Access Control in the RCP+ server of the Bosch Video Recording Manager (VRM) component allows arbitrary and unauthenticated access to a limited subset of certificates,…
7.7
CVE-2023-28175
Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal network via a port…
7.5
CVE-2020-6768
A path traversal vulnerability in the Bosch Video Management System (BVMS) NoTouch deployment allows an unauthenticated remote attacker to read arbitrary files from the Central…
6.5
CVE-2020-6767
A path traversal vulnerability in the Bosch Video Management System (BVMS) FileTransferService allows an authenticated remote attacker to read arbitrary files from the Central…
6.5
CVE-2019-8952
A Path Traversal vulnerability located in the webserver affects several Bosch hardware and software products