VulnerabilityModified

CVE-2020-6770

Deserialization of Untrusted Data in the BVMS Mobile Video Service (BVMS MVS) allows an unauthenticated remote attacker to execute arbitrary code on the system.

CRITICAL 9.8EPSS 3.64%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (3.64%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Deserialization of Untrusted Data in the BVMS Mobile Video Service (BVMS MVS) allows an unauthenticated remote attacker to execute arbitrary code on the system. This affects Bosch BVMS versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.0.329 and 7.5 and older. This affects Bosch DIVAR IP 3000 and DIVAR IP 7000 if a vulnerable BVMS version is installed.

CVSS 3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 3.64% probability · 89th percentile
CISA KEV: Not listed
Weakness: CWE-502
Affected: bosch/bosch video management system mobile video service · bosch/divar ip 3000 firmware · bosch/divar ip 7000 firmware
Source: psirt@bosch.com

References

https://psirt.bosch.com/security-advisories/BOSCH-SA-885551-BT.htmlVendor Advisory
https://psirt.bosch.com/security-advisories/BOSCH-SA-885551-BT.htmlVendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.