Lucene search

BoschCVE-2020-6767

HistoryFeb 06, 2020 - 5:15 p.m.

CVE-2020-6767

2020-02-0617:15:14

CWE-22

bosch

web.nvd.nist.gov

cve-2020-6767

bosch video management system

bvms

filetransferservice

path traversal

security vulnerability

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

7.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

AI Score

6.3

Confidence

High

EPSS

0.002

Percentile

60.0%

JSON

A path traversal vulnerability in the Bosch Video Management System (BVMS) FileTransferService allows an authenticated remote attacker to read arbitrary files from the Central Server. This affects Bosch BVMS versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.329 and 7.5 and older. This affects Bosch BVMS Viewer versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.329 and 7.5 and older. This affects Bosch DIVAR IP 3000, DIVAR IP 7000 and DIVAR IP all-in-one 5000 if a vulnerable BVMS version is installed.

Affected configurations

Nvd

Node

boschvideo_management_system_viewerRange≤7.5

boschvideo_management_system_viewerRange8.0–8.0.329

boschvideo_management_system_viewerRange9.0–9.0.0.827

boschvideo_management_system_viewerRange10.0–10.0.0.1225

Node

boschdivar_ip_3000Match-

AND

boschvideo_management_systemRange≤7.5

boschvideo_management_systemRange8.0–8.0.0.329

boschvideo_management_systemRange9.0–9.0.0.827

boschvideo_management_systemRange10.0–10.0.0.1225

Node

boschdivar_ip_7000Match-

AND

boschvideo_management_systemRange≤7.5

boschvideo_management_systemRange8.0–8.0.0.329

boschvideo_management_systemRange9.0–9.0.0.827

boschvideo_management_systemRange10.0–10.0.0.1225

Node

boschdivar_ip_all-in-one_5000Match-

AND

boschvideo_management_systemRange≤7.5

boschvideo_management_systemRange8.0–8.0.0.329

boschvideo_management_systemRange9.0–9.0.0.827

boschvideo_management_systemRange10.0–10.0.0.1225

VendorProductVersionCPE
boschvideo_management_system_viewer*cpe:2.3:a:bosch:video_management_system_viewer:*:*:*:*:*:*:*:*
boschdivar_ip_3000-cpe:2.3:h:bosch:divar_ip_3000:-:*:*:*:*:*:*:*
boschvideo_management_system*cpe:2.3:a:bosch:video_management_system:*:*:*:*:*:*:*:*
boschdivar_ip_7000-cpe:2.3:h:bosch:divar_ip_7000:-:*:*:*:*:*:*:*
boschdivar_ip_all-in-one_5000-cpe:2.3:h:bosch:divar_ip_all-in-one_5000:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
bosch	video_management_system_viewer	*	cpe:2.3:a:bosch:video_management_system_viewer::::::::
bosch	divar_ip_3000	-	cpe:2.3:h:bosch:divar_ip_3000:-:::::::*
bosch	video_management_system	*	cpe:2.3:a:bosch:video_management_system::::::::
bosch	divar_ip_7000	-	cpe:2.3:h:bosch:divar_ip_7000:-:::::::*
bosch	divar_ip_all-in-one_5000	-	cpe:2.3:h:bosch:divar_ip_all-in-one_5000:-:::::::*

CNA Affected

[
  {
    "product": "DIVAR IP 3000",
    "vendor": "Bosch",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "product": "DIVAR IP 7000",
    "vendor": "Bosch",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "product": "DIVAR IP all-in-one 5000",
    "vendor": "Bosch",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "product": "Bosch Video Management System",
    "vendor": "Bosch",
    "versions": [
      {
        "status": "affected",
        "version": "7.0 and older"
      },
      {
        "status": "affected",
        "version": "7.5 and older"
      },
      {
        "status": "affected",
        "version": "8.0 through 8.0.0.329"
      },
      {
        "status": "affected",
        "version": "9.0 through 9.0.0.827"
      },
      {
        "status": "affected",
        "version": "10.0 through 10.0.0.1225"
      }
    ]
  },
  {
    "product": "BVMS Viewer",
    "vendor": "Bosch",
    "versions": [
      {
        "status": "affected",
        "version": "7.0 and older"
      },
      {
        "status": "affected",
        "version": "7.5 and older"
      },
      {
        "status": "affected",
        "version": "8.0 through 8.0.0.329"
      },
      {
        "status": "affected",
        "version": "9.0 through 9.0.0.827"
      },
      {
        "status": "affected",
        "version": "10.0 through 10.0.0.1225"
      }
    ]
  }
]

References

media.boschsecurity.com/fs/media/pb/security_advisories/bosch-sa-381489-bt_cve-2020-6767_securityadvisory_bvms_pathtraversal.pdf

psirt.bosch.com/security-advisories/BOSCH-SA-381489-BT.html

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

7.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

AI Score

6.3

Confidence

High

EPSS

0.002

Percentile

60.0%

JSON

Related for CVE-2020-6767