VYPR
← All advisories
Critical severity9.8NVD Advisory· Published May 29, 2019· Updated Jun 17, 2026

CVE-2019-6957

CVE-2019-6957

Description

A recently discovered security vulnerability affects all Bosch Video Management System (BVMS) versions 9.0 and below, DIVAR IP 2000, 3000, 5000 and 7000, Video Recording Manager (VRM), Video Streaming Gateway (VSG), Configuration Manager, Building Integration System (BIS) with Video Engine, Access Professional Edition (APE), Access Easy Controller (AEC), Bosch Video Client (BVC) and Video SDK (VSDK). The vulnerability potentially allows the unauthorized execution of code in the system via the network interface.

Affected products

30
  • Bosch/Access Professional Edition2 versions
    cpe:2.3:a:bosch:access_professional_edition:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:bosch:access_professional_edition:*:*:*:*:*:*:*:*range: >=3.0,<=3.7
    • (no CPE)range: <=9.0
  • Bosch/Bosch Video Client
    cpe:2.3:a:bosch:bosch_video_client:*:*:*:*:*:*:*:*
    Range: <1.7.6.079
  • Bosch/Bosch Video Management System
    cpe:2.3:a:bosch:bosch_video_management_system:*:*:*:*:*:*:*:*
    Range: <=9.0
  • Bosch/Building Integration System4 versions
    cpe:2.3:a:bosch:building_integration_system:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:bosch:building_integration_system:*:*:*:*:*:*:*:*range: >=2.2,<=4.4
    • cpe:2.3:a:bosch:building_integration_system:4.5:*:*:*:*:*:*:*
    • cpe:2.3:a:bosch:building_integration_system:4.6.1:*:*:*:*:*:*:*
    • cpe:2.3:a:bosch:building_integration_system:4.6:*:*:*:*:*:*:*
  • Bosch/Configuration Manager2 versions
    cpe:2.3:a:bosch:configuration_manager:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:bosch:configuration_manager:*:*:*:*:*:*:*:*range: <6.10
    • (no CPE)range: <=9.0
  • Bosch/Video Recording Manager2 versions
    cpe:2.3:a:bosch:video_recording_manager:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:bosch:video_recording_manager:*:*:*:*:*:*:*:*range: <3.71.0032
    • (no CPE)range: <=9.0
  • Bosch/Video SDK2 versions
    cpe:2.3:a:bosch:video_sdk:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:bosch:video_sdk:*:*:*:*:*:*:*:*range: <6.32.0099
    • (no CPE)range: <=9.0
  • Bosch/Video Streaming Gateway2 versions
    cpe:2.3:a:bosch:video_streaming_gateway:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:bosch:video_streaming_gateway:*:*:*:*:*:*:*:*range: <6.43.0023
    • (no CPE)range: <=9.0
  • Bosch/Access Easy Controller Firmware4 versions
    cpe:2.3:o:bosch:access_easy_controller_firmware:2.1.8.5:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:bosch:access_easy_controller_firmware:2.1.8.5:*:*:*:*:*:*:*
    • cpe:2.3:o:bosch:access_easy_controller_firmware:2.1.9.0:*:*:*:*:*:*:*
    • cpe:2.3:o:bosch:access_easy_controller_firmware:2.1.9.1:*:*:*:*:*:*:*
    • cpe:2.3:o:bosch:access_easy_controller_firmware:2.1.9.3:*:*:*:*:*:*:*
  • Bosch/Dip 2000 Firmware
    cpe:2.3:o:bosch:dip_2000_firmware:*:*:*:*:*:*:*:*
    Range: <0380.037
  • Bosch/Dip 3000 Firmware
    cpe:2.3:o:bosch:dip_3000_firmware:-:*:*:*:*:*:*:*
  • Bosch/Dip 5000 Firmware
    cpe:2.3:o:bosch:dip_5000_firmware:*:*:*:*:*:*:*:*
    Range: <038.037
  • Bosch/Dip 7000 Firmware
    cpe:2.3:o:bosch:dip_7000_firmware:-:*:*:*:*:*:*:*
  • Bosch/Bosch Video Management Systemdescription
  • Bosch/Access Easy Controllerllm-create
    Range: <=9.0
  • Bosch/Building Integration System (BIS)llm-fuzzy
    Range: <=9.0
  • Bosch/Bosch Video Client (BVC)llm-fuzzy
    Range: <=9.0
  • Bosch/Video Management Systemllm-fuzzy
    Range: <=9.0
  • Bosch/Divar IP 3000llm-fuzzy
    Range: <=9.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.