Lucene search

[email protected]CVE-2020-6768

HistoryFeb 07, 2020 - 9:15 p.m.

CVE-2020-6768

2020-02-0721:15:10

CWE-22

[email protected]

web.nvd.nist.gov

112

cve-2020-6768

bosch

video management system

bvms

notouch

path traversal

vulnerability

remote attacker

arbitrary files

security advisory

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

7.5 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.1%

JSON

A path traversal vulnerability in the Bosch Video Management System (BVMS) NoTouch deployment allows an unauthenticated remote attacker to read arbitrary files from the Central Server. This affects Bosch BVMS versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.329 and 7.5 and older. This affects Bosch BVMS Viewer versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.329 and 7.5 and older. This affects Bosch DIVAR IP 3000, DIVAR IP 7000 and DIVAR IP all-in-one 5000 if a vulnerable BVMS version is installed.

Affected configurations

NVD

Node

boschvideo_management_system_viewerRange≤7.5

boschvideo_management_system_viewerRange8.0–8.0.329

boschvideo_management_system_viewerRange9.0–9.0.0.827

boschvideo_management_system_viewerRange10.0–10.0.0.1225

Node

boschdivar_ip_3000Match-

AND

boschvideo_management_systemRange≤7.5

boschvideo_management_systemRange8.0–8.0.0.329

boschvideo_management_systemRange9.0–9.0.0.827

boschvideo_management_systemRange10.0–10.0.0.1225

Node

boschdivar_ip_7000Match-

AND

boschvideo_management_systemRange≤7.5

boschvideo_management_systemRange8.0–8.0.0.329

boschvideo_management_systemRange9.0–9.0.0.827

boschvideo_management_systemRange10.0–10.0.0.1225

Node

boschdivar_ip_all-in-one_5000Match-

AND

boschvideo_management_systemRange≤7.5

boschvideo_management_systemRange8.0–8.0.0.329

boschvideo_management_systemRange9.0–9.0.0.827

boschvideo_management_systemRange10.0–10.0.0.1225

CPENameOperatorVersion
bosch:video_management_system_viewerbosch video management system viewerle7.5
bosch:video_management_system_viewerbosch video management system viewerle8.0.329
bosch:video_management_system_viewerbosch video management system viewerle9.0.0.827
bosch:video_management_system_viewerbosch video management system viewerle10.0.0.1225

CPE	Name	Operator	Version
bosch:video_management_system_viewer	bosch video management system viewer	le	7.5
bosch:video_management_system_viewer	bosch video management system viewer	le	8.0.329
bosch:video_management_system_viewer	bosch video management system viewer	le	9.0.0.827
bosch:video_management_system_viewer	bosch video management system viewer	le	10.0.0.1225

CNA Affected

[
  {
    "product": "DIVAR IP 3000",
    "vendor": "Bosch",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "product": "DIVAR IP 7000",
    "vendor": "Bosch",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "product": "DIVAR IP all-in-one 5000",
    "vendor": "Bosch",
    "versions": [
      {
        "status": "affected",
        "version": "All"
      }
    ]
  },
  {
    "product": "Bosch Video Management System",
    "vendor": "Bosch",
    "versions": [
      {
        "lessThanOrEqual": "7.5",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "8.0.0.329",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "9.0.0.827",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "10.0.0.1225",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "BVMS Viewer",
    "vendor": "Bosch",
    "versions": [
      {
        "lessThanOrEqual": "7.5",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "8.0.0.329",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "9.0.0.827",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "10.0.0.1225",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

psirt.bosch.com/security-advisories/bosch-sa-815013-bt.html

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

8.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

7.5 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.1%

JSON

Related for CVE-2020-6768

prion1 nvd1 cvelist1