CVE-2020-6785CWE-427

Uncontrolled Search Path Element in Bosch BVMS and BVMS Viewer

High · published March 25, 2021

CVSS v3.1
7.8
EPSS
0%
Percentile
26.1
In the wild
Unconfirmed
What it is

Loading a DLL through an Uncontrolled Search Path Element in Bosch BVMS and BVMS Viewer in versions 10.1.0, 10.0.1, 10.0.0 and 9.0.0 and older potentially allows an attacker to execute arbitrary code on a victim's system. This affects both the installer as well as the installed application. This also affects Bosch DIVAR IP 7000 R2, Bosch DIVAR IP all-in-one 5000 and Bosch DIVAR IP all-in-one 7000 with installers and installed BVMS versions prior to BVMS 10.1.1.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00338 · 26.1th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2021-03-25T15:49Z
EPSS history
Timeline
  • 25 MAR 15:49Z
    Uncontrolled Search Path Element in Bosch BVMS and BVMS Viewer
    cvelistv5