CVE-2020-6770criticalCWE-502

CVE-2020-6770: falha crítica em Bosch BVMS Mobile Video Service

Deserialization of Untrusted Data in Bosch BVMS Mobile Video Service

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar DIVAR IP+ Monitorar BVMS Mobile Video Service

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 10epss 3.6%
Deserialization of Untrusted Data in the BVMS Mobile Video Service (BVMS MVS) allows an unauthenticated remote attacker to execute arbitrary code on the system. This affects Bosch BVMS versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.0.329 and 7.5 and older. This affects Bosch DIVAR IP 3000 and DIVAR IP 7000 if a vulnerable BVMS version is installed.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
Bosch · BVMS Mobile Video ServiceBosch · DIVAR IP 3000Bosch · DIVAR IP 7000
CVEs relacionadas — Bosch BVMS Mobile Video Service

No mesmo produto, das mais perigosas para as menos.

CVE-2020-6769CRITICALMissing Authentication for Critical Function in Bosch Video Streaming GatewayEPSS 2.2%CVE-2020-6768HIGHPath Traversal in Bosch Video Management System (BVMS)EPSS 1.7%CVE-2020-6767HIGHPath Traversal in Bosch Video Management System (BVMS)EPSS 1.3%