PT-2019-18377 · Bosch · Video Streaming Gateway+9

CVE-2019-6957 · Publicado 2019-05-29 · Atualizado 2022-12-01

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Bosch Video Management System (BVMS) versions 9.0 and below DIVAR IP versions 2000 through 7000 Video Recording Manager (VRM) Video Streaming Gateway (VSG) Configuration Manager Building Integration System (BIS) with Video Engine Access Professional Edition (APE) Access Easy Controller (AEC) Bosch Video Client (BVC) Video SDK (VSDK)

Description The issue potentially allows the unauthorized execution of code in the system via the network interface.

Recommendations For Bosch Video Management System (BVMS) versions 9.0 and below, update to a version above 9.0. For DIVAR IP versions 2000 through 7000, consider disabling network interface access until a patch is available. For Video Recording Manager (VRM), Video Streaming Gateway (VSG), Configuration Manager, Building Integration System (BIS) with Video Engine, Access Professional Edition (APE), Access Easy Controller (AEC), Bosch Video Client (BVC), and Video SDK (VSDK), restrict network access to minimize the risk of exploitation.

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2019-6957

Produtos afetados

Access Easy Controller

Access Professional Edition

Bosch Video Client

Bosch Video Management System

Building Integration System

Configuration Manager

Divar Ip

Video Recording Manager

Video Sdk

Video Streaming Gateway

Referências · 4

• https://media.boschsecurity.com/fs/media/pb/security_advisories/bosch-2019-0403bt-cve-2019-6957_security_advisory_software_buffer_overflow.pdf · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-6957 · Aviso do Fabricante
• https://t.me/cvenotify/38826 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2019-6957 · Nota de Segurança