1. Home
  2. CVE Database
  3. CVE-2019-6957
CRITICAL · 9.8

CVE-2019-6957

A recently discovered security vulnerability affects all Bosch Video Management System (BVMS) versions 9.0 and below, DIVAR IP 2000, 3000, 5000 and 7000, Video Recording Manager (VRM), Video Streaming...

Vulnerability Description

A recently discovered security vulnerability affects all Bosch Video Management System (BVMS) versions 9.0 and below, DIVAR IP 2000, 3000, 5000 and 7000, Video Recording Manager (VRM), Video Streaming Gateway (VSG), Configuration Manager, Building Integration System (BIS) with Video Engine, Access Professional Edition (APE), Access Easy Controller (AEC), Bosch Video Client (BVC) and Video SDK (VSDK). The vulnerability potentially allows the unauthorized execution of code in the system via the network interface.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
BoschAccess Professional Edition>= 3.0, <= 3.7
BoschBosch Video Client< 1.7.6.079
BoschBosch Video Management System<= 9.0
BoschBuilding Integration System>= 2.2, <= 4.4
BoschConfiguration Manager< 6.10
BoschVideo Recording Manager< 3.71.0032
BoschVideo Sdk< 6.32.0099
BoschVideo Streaming Gateway< 6.43.0023
BoschDip 2000 Firmware< 0380.037
BoschDip 2000-
BoschDip 3000 Firmware-
BoschDip 3000-
BoschDip 5000 Firmware< 038.037
BoschDip 5000-
BoschDip 7000 Firmware-
BoschDip 7000gen1
BoschAccess Easy Controller Firmware2.1.8.5
BoschAccess Easy Controller-

Related Weaknesses (CWE)

CWE-787

References

FAQ

What is CVE-2019-6957?

CVE-2019-6957 is a vulnerability with a CVSS score of 9.8 (CRITICAL). A recently discovered security vulnerability affects all Bosch Video Management System (BVMS) versions 9.0 and below, DIVAR IP 2000, 3000, 5000 and 7000, Video Recording Manager (VRM), Video Streaming...

How severe is CVE-2019-6957?

CVE-2019-6957 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2019-6957?

Check the references section above for vendor advisories and patch information. Affected products include: Bosch Access Professional Edition, Bosch Bosch Video Client, Bosch Bosch Video Management System, Bosch Building Integration System, Bosch Configuration Manager.