PT-2020-19219 · Bosch · Bosch Bvms Viewer+4

Published 2020-02-06 · Updated 2020-02-14 · CVE-2020-6767

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Bosch BVMS versions 7.5 and older Bosch BVMS versions 8.0 through 8.0.329 Bosch BVMS versions 9.0 through 9.0.0.827 Bosch BVMS versions 10.0 through 10.0.0.1225 Bosch BVMS Viewer versions 7.5 and older Bosch BVMS Viewer versions 8.0 through 8.0.329 Bosch BVMS Viewer versions 9.0 through 9.0.0.827 Bosch BVMS Viewer versions 10.0 through 10.0.0.1225 Bosch DIVAR IP 3000 (if a vulnerable BVMS version is installed) Bosch DIVAR IP 7000 (if a vulnerable BVMS version is installed) Bosch DIVAR IP all-in-one 5000 (if a vulnerable BVMS version is installed)

Description A path traversal issue in the FileTransferService of the Bosch Video Management System allows an authenticated remote attacker to read arbitrary files from the Central Server.

Recommendations For Bosch BVMS versions 7.5 and older, update to a version newer than 10.0.0.1225. For Bosch BVMS versions 8.0 through 8.0.329, update to a version newer than 10.0.0.1225. For Bosch BVMS versions 9.0 through 9.0.0.827, update to a version newer than 10.0.0.1225. For Bosch BVMS versions 10.0 through 10.0.0.1225, update to a version newer than 10.0.0.1225. For Bosch BVMS Viewer versions 7.5 and older, update to a version newer than 10.0.0.1225. For Bosch BVMS Viewer versions 8.0 through 8.0.329, update to a version newer than 10.0.0.1225. For Bosch BVMS Viewer versions 9.0 through 9.0.0.827, update to a version newer than 10.0.0.1225. For Bosch BVMS Viewer versions 10.0 through 10.0.0.1225, update to a version newer than 10.0.0.1225. For Bosch DIVAR IP 3000, DIVAR IP 7000, and DIVAR IP all-in-one 5000, ensure that the installed BVMS version is updated to a version newer than 10.0.0.1225.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2020-6767

Affected Products

Bosch Bvms

Bosch Bvms Viewer

Bosch Divar Ip 3000

Bosch Divar Ip 7000

Bosch Divar Ip All-In-One 5000

References · 4

• https://osv.dev/vulnerability/CVE-2020-6767 · Vendor Advisory
• https://media.boschsecurity.com/fs/media/pb/security_advisories/bosch-sa-381489-bt_cve-2020-6767_securityadvisory_bvms_pathtraversal.pdf · Vendor Advisory
• https://psirt.bosch.com/security-advisories/BOSCH-SA-381489-BT.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-6767 · Security Note