CVE-2020-6785

Published Mar 25, 2021

Last updated 4 years ago

CVSS high 7.8

Overview

Description: Loading a DLL through an Uncontrolled Search Path Element in Bosch BVMS and BVMS Viewer in versions 10.1.0, 10.0.1, 10.0.0 and 9.0.0 and older potentially allows an attacker to execute arbitrary code on a victim's system. This affects both the installer as well as the installed application. This also affects Bosch DIVAR IP 7000 R2, Bosch DIVAR IP all-in-one 5000 and Bosch DIVAR IP all-in-one 7000 with installers and installed BVMS versions prior to BVMS 10.1.1.
Source: psirt@bosch.com
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.8
Impact score: 5.9
Exploitability score: 1.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity: HIGH

CVSS 2.0

Type: Primary
Base score: 6.9
Impact score: 10
Exploitability score: 3.4
Vector string: AV:L/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: CWE-427
psirt@bosch.com: CWE-427

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:bosch:video_management_system:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0D7D73DA-EDCB-4F57-AAC9-965B63B9F3CF",
            "versionEndExcluding": "9.0"
          },
          {
            "criteria": "cpe:2.3:a:bosch:video_management_system:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C6559B32-B0A4-47CC-8245-040E5E9B1C47",
            "versionEndExcluding": "10.0.2",
            "versionStartIncluding": "10.0"
          },
          {
            "criteria": "cpe:2.3:a:bosch:video_management_system:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "355E7A22-FDEE-4C68-9127-4924DB360D38",
            "versionEndExcluding": "10.1.1",
            "versionStartIncluding": "10.1"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:bosch:divar_ip_7000_r2:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "7C27C0C9-7FC8-4B0C-BBF1-C7833CA9B2DE"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:bosch:video_management_system:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0D7D73DA-EDCB-4F57-AAC9-965B63B9F3CF",
            "versionEndExcluding": "9.0"
          },
          {
            "criteria": "cpe:2.3:a:bosch:video_management_system:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C6559B32-B0A4-47CC-8245-040E5E9B1C47",
            "versionEndExcluding": "10.0.2",
            "versionStartIncluding": "10.0"
          },
          {
            "criteria": "cpe:2.3:a:bosch:video_management_system:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "355E7A22-FDEE-4C68-9127-4924DB360D38",
            "versionEndExcluding": "10.1.1",
            "versionStartIncluding": "10.1"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:bosch:divar_ip_all-in-one_5000:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "7075A014-A297-4E41-81D8-2535BC2BD4E9"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:bosch:divar_ip_all-in-one_7000:-:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "E531FC6E-B7AF-48DF-ACC2-91B5BD2B68DB"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:bosch:video_management_system:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0D7D73DA-EDCB-4F57-AAC9-965B63B9F3CF",
            "versionEndExcluding": "9.0"
          },
          {
            "criteria": "cpe:2.3:a:bosch:video_management_system:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C6559B32-B0A4-47CC-8245-040E5E9B1C47",
            "versionEndExcluding": "10.0.2",
            "versionStartIncluding": "10.0"
          },
          {
            "criteria": "cpe:2.3:a:bosch:video_management_system:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "355E7A22-FDEE-4C68-9127-4924DB360D38",
            "versionEndExcluding": "10.1.1",
            "versionStartIncluding": "10.1"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:bosch:video_management_system_viewer:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "336DCAFC-E774-457C-82FD-5FD51E385872",
            "versionEndExcluding": "9.0"
          },
          {
            "criteria": "cpe:2.3:a:bosch:video_management_system_viewer:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "02F69D10-E545-472A-83C7-F988EA357CBC",
            "versionEndExcluding": "10.0.2",
            "versionStartIncluding": "10.0"
          },
          {
            "criteria": "cpe:2.3:a:bosch:video_management_system_viewer:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "24D063D2-7423-4A15-93F9-976597F7742D",
            "versionEndExcluding": "10.1.1",
            "versionStartIncluding": "10.1.0"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Risk scores

CVSS 3.1

CVSS 2.0

Weaknesses

Social media

Configurations

References