CVE-2020-6790 HIGH

CVE-2020-6790: Uncontrolled Search Path Element in Bosch Video Streaming Gateway Installer

Vendor Bosch
Product Video Streaming Gateway
Weakness CWE-427
Published March 25, 2021
Last update September 17, 2024

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Calling an executable through an Uncontrolled Search Path Element in the Bosch Video Streaming Gateway installer up to and including version 6.45.10 potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious exe in the same directory where the installer is started from.

Key dates

02Disclosure timeline

March 25, 2021 CVE published
September 17, 2024 Record updated