Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2020-6770

Deserialization of Untrusted Data in Bosch BVMS Mobile Video Service

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
bosch

Description

Deserialization of Untrusted Data in the BVMS Mobile Video Service (BVMS MVS) allows an unauthenticated remote attacker to execute arbitrary code on the system. This affects Bosch BVMS versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.0.329 and 7.5 and older. This affects Bosch DIVAR IP 3000 and DIVAR IP 7000 if a vulnerable BVMS version is installed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bosch DIVAR IP 3000

  • Allaffected

Bosch DIVAR IP 7000

  • Allaffected

Bosch BVMS Mobile Video Service

  • unspecified to ≤ 8.0.0.329affected
  • unspecified to ≤ 9.0.0.827affected
  • unspecified to ≤ 10.0.0.1225affected
  • unspecified to ≤ 7.5affected

References