Medium severity · published Feb 6, 2020
CVE-2020-6767
A path traversal vulnerability in the Bosch Video Management System (BVMS) FileTransferService allows an authenticated remote attacker to read arbitrary files from the Central…
6.5
CVSS
1.3%
EPSS
No
On KEV
Description
A path traversal vulnerability in the Bosch Video Management System (BVMS) FileTransferService allows an authenticated remote attacker to read arbitrary files from the Central Server. This affects Bosch BVMS versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.329 and 7.5 and older. This affects Bosch BVMS Viewer versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.329 and 7.5 and older. This affects Bosch DIVAR IP 3000, DIVAR IP 7000 and DIVAR IP all-in-one 5000 if a vulnerable BVMS version is installed.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
VM
Video Management System · Bosch
through 7.5; 8.0 through 8.0.0.329; 9.0 through 9.0.0.827; 10.0 through 10.0.0.1225; through 7.5; 8.0 through 8.0.0.329; +6 more · source: NVD
VM
Video Management System Viewer · Bosch
through 7.5; 8.0 through 8.0.329; 9.0 through 9.0.0.827; 10.0 through 10.0.0.1225 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-6767
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-6767
Broken Link
https://psirt.bosch.com/security-advisories/BOSCH-SA-381489-BT.html
Patch
https://media.boschsecurity.com/fs/media/pb/security_advisories/bosch-sa-381489-bt_cve-2020-6767_securityadvisory_bvms_pathtraversal.pdf
More from Video Management System
9.8
CVE-2019-11684
Improper Access Control in the RCP+ server of the Bosch Video Recording Manager (VRM) component allows arbitrary and unauthenticated access to a limited subset of certificates,…
7.8
CVE-2020-6785
Loading a DLL through an Uncontrolled Search Path Element in Bosch BVMS and BVMS Viewer in versions 10.1.0, 10.0.1, 10.0.0 and 9.0.0 and older potentially allows an attacker to…
7.7
CVE-2023-28175
Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user to access resources within the trusted internal network via a port…
7.5
CVE-2020-6768
A path traversal vulnerability in the Bosch Video Management System (BVMS) NoTouch deployment allows an unauthenticated remote attacker to read arbitrary files from the Central…
6.5
CVE-2019-8952
A Path Traversal vulnerability located in the webserver affects several Bosch hardware and software products