Vulnerabilities > CVE-2019-6957 - Out-of-bounds Write vulnerability in Bosch products

047910
CVSS 9.8 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
bosch
CWE-787
critical
NVD
Published: 2019-05-29
Updated: 2022-11-30

Summary

A recently discovered security vulnerability affects all Bosch Video Management System (BVMS) versions 9.0 and below, DIVAR IP 2000, 3000, 5000 and 7000, Video Recording Manager (VRM), Video Streaming Gateway (VSG), Configuration Manager, Building Integration System (BIS) with Video Engine, Access Professional Edition (APE), Access Easy Controller (AEC), Bosch Video Client (BVC) and Video SDK (VSDK). The vulnerability potentially allows the unauthorized execution of code in the system via the network interface.

Vulnerable Configurations

Part Description Count
Application
Bosch
71
OS
Bosch
8
Hardware
Bosch
6

Common Weakness Enumeration (CWE)

References