7.8
CVE-2020-6786
- EPSS 0.06%
- Veröffentlicht 25.03.2021 16:15:13
- Zuletzt bearbeitet 21.11.2024 05:36:10
- Quelle psirt@bosch.com
- CVE-Watchlists
- Unerledigt
LoginLoading a DLL through an Uncontrolled Search Path Element in the Bosch Video Recording Manager installer up to and including version 3.82.0055 for 3.82, up to and including version 3.81.0064 for 3.81 and 3.71 and older potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious DLL in the same directory where the installer is started from.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Bosch ≫ Video Recording Manager Version <= 3.71
Bosch ≫ Video Recording Manager Version >= 3.81 <= 3.81.0064
Bosch ≫ Video Recording Manager Version >= 3.82 <= 3.82.0055
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.06% | 0.16 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 6.9 | 3.4 | 10 |
AV:L/AC:M/Au:N/C:C/I:C/A:C
|
| psirt@bosch.com | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
CWE-427 Uncontrolled Search Path Element
The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.