Path traversal

2020-02-0721:15:00

PRIOn knowledge base

www.prio-n.com

0.004 Low

EPSS

Percentile

75.1%

JSON

A path traversal vulnerability in the Bosch Video Management System (BVMS) NoTouch deployment allows an unauthenticated remote attacker to read arbitrary files from the Central Server. This affects Bosch BVMS versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.329 and 7.5 and older. This affects Bosch BVMS Viewer versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.329 and 7.5 and older. This affects Bosch DIVAR IP 3000, DIVAR IP 7000 and DIVAR IP all-in-one 5000 if a vulnerable BVMS version is installed.

CPENameOperatorVersion
video_management_systemle7.5
video_management_systemge8.0
video_management_systemle8.0.0.329
video_management_systemge9.0
video_management_systemle9.0.0.827
video_management_systemge10.0
video_management_systemle10.0.0.1225
video_management_systemle7.5
video_management_systemge8.0
video_management_systemle8.0.0.329

Name	Operator	Version
video_management_system	le	7.5
video_management_system	ge	8.0
video_management_system	le	8.0.0.329
video_management_system	ge	9.0
video_management_system	le	9.0.0.827
video_management_system	ge	10.0
video_management_system	le	10.0.0.1225
video_management_system	le	7.5
video_management_system	ge	8.0
video_management_system	le	8.0.0.329

Rows per page:

1-10 of 281

References

psirt.bosch.com/security-advisories/bosch-sa-815013-bt.html

0.004 Low

EPSS

Percentile

75.1%

JSON

Related for PRION:CVE-2020-6768