CVE-2020-6769: Missing Authentication for Critical Function in Bosch Video Streaming Gateway
Bosch · DIVAR IP 2000
Affected: Bosch DIVAR IP 2000 · Exploitation: possible (1 to 10%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 82% of scored CVEs
DescriptionCVE.org
Missing Authentication for Critical Function in the Bosch Video Streaming Gateway (VSG) allows an unauthenticated remote attacker to retrieve and set arbitrary configuration data of the Video Streaming Gateway. A successful attack can impact the confidentiality and availability of live and recorded video data of all cameras configured to be controlled by the VSG as well as the recording storage associated with the VSG. This affects Bosch Video Streaming Gateway versions 6.45 <= 6.45.08, 6.44 <= 6.44.022, 6.43 <= 6.43.0023 and 6.42.10 and older. This affects Bosch DIVAR IP 3000, DIVAR IP 7000 and DIVAR IP all-in-one 5000 if a vulnerable VSG version is installed with BVMS. This affects Bosch DIVAR IP 2000 <= 3.62.0019 and DIVAR IP 5000 <= 3.80.0039 if the corresponding port 8023 has been opened in the device's firewall.
Affected products6
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Bosch · DIVAR IP 2000up to and including 3.62.0019
- Bosch · DIVAR IP 5000up to and including 3.80.0039
- Bosch · Video Streaming Gatewayfrom 6.45 up to and including 6.45.08; from 6.44 up to and including 6.44.0030; from 6.43 up to and including 6.43.0023; from 6.42 and older up to and including 6.42.10
- Bosch · DIVAR IP 3000All
- Bosch · DIVAR IP 7000All
- Bosch · DIVAR IP all-in-one 5000All
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Possible (1 to 10%). EPSS between 1% and 10%.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Bosch
- Published
- February 2020
CoverageNo articles yet
No CyberSIXT article names CVE-2020-6769 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.