CVE-2020-6790: high-severity vulnerability in Bosch Video Streaming Gateway
Uncontrolled Search Path Element in Bosch Video Streaming Gateway Installer
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.8epss 0.4%
Calling an executable through an Uncontrolled Search Path Element in the Bosch Video Streaming Gateway installer up to and including version 6.45.10 potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious exe in the same directory where the installer is started from.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Bosch · Video Streaming GatewayRelated CVEs — Bosch Video Streaming Gateway
In the same product, most dangerous first.