CVE-2020-6786 HIGH

CVE-2020-6786: Uncontrolled Search Path Element in Bosch Video Recording Manager Installer

Vendor Bosch
Product Video Recording Manager
Weakness CWE-427
Published March 25, 2021
Last update September 16, 2024

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Loading a DLL through an Uncontrolled Search Path Element in the Bosch Video Recording Manager installer up to and including version 3.82.0055 for 3.82, up to and including version 3.81.0064 for 3.81 and 3.71 and older potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious DLL in the same directory where the installer is started from.

Key dates

02Disclosure timeline

March 25, 2021 CVE published
September 16, 2024 Record updated