EUVD-2020-27937

Malware in sbrugna...

EUVD-2020-27916

Malware in sbrugna...

Code injection

Calling an executable through an Uncontrolled Search Path Element in the Bosch Video Streaming Gateway installer up to and including version 6.45.10 potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious...

CVE-2020-6790 Uncontrolled Search Path Element in Bosch Video Streaming Gateway Installer

Calling an executable through an Uncontrolled Search Path Element in the Bosch Video Streaming Gateway installer up to and including version 6.45.10 potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious...

CVE-2020-6790

The CVE concerns Bosch Video Streaming Gateway installer (up to version 6.45.10) with an Uncontrolled Search Path Element flaw. An attacker who tricks a user into placing a malicious executable in the same directory from which the installer is launched can achieve arbitrary code execution on the ...

CVE-2020-6790: Uncontrolled Search Path Element

Calling an executable through an Uncontrolled Search Path Element in the Bosch Video Streaming Gateway installer up to and including version 6.45.10 potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious...

PT-2021-12602

Name of the Vulnerable Software and Affected Versions: Bosch Video Streaming Gateway versions up to and including 6.45.10 Description: The issue allows an attacker to execute arbitrary code on a victim's system by calling an executable through an Uncontrolled Search Path Element in the Bosch Vide...

CVE-2020-6769

Missing Authentication for Critical Function in the Bosch Video Streaming Gateway VSG allows an unauthenticated remote attacker to retrieve and set arbitrary configuration data of the Video Streaming Gateway. A successful attack can impact the confidentiality and availability of live and recorded...

CVE-2020-6769 Missing Authentication for Critical Function in Bosch Video Streaming Gateway

Missing Authentication for Critical Function in the Bosch Video Streaming Gateway VSG allows an unauthenticated remote attacker to retrieve and set arbitrary configuration data of the Video Streaming Gateway. A successful attack can impact the confidentiality and availability of live and recorded...

PT-2020-19221

Name of the Vulnerable Software and Affected Versions Bosch Video Streaming Gateway versions 6.42.10 and older, 6.43 = 6.43.0023, 6.44 = 6.44.022, 6.45 = 6.45.08 Bosch DIVAR IP 2000 versions = 3.62.0019 Bosch DIVAR IP 5000 versions = 3.80.0039 Description The issue allows an unauthenticated remot...

CVE-2020-6769: Missing Authentication for Critical Function

Missing Authentication for Critical Function in the Bosch Video Streaming Gateway VSG allows an unauthenticated remote attacker to retrieve and set arbitrary configuration data of the Video Streaming Gateway. A successful attack can impact the confidentiality and availability of live and recorded...