VYPR
← All advisories
High severity8.6NVD Advisory· Published Feb 7, 2020· Updated Jun 17, 2026

CVE-2020-6768

CVE-2020-6768

Description

A path traversal vulnerability in the Bosch Video Management System (BVMS) NoTouch deployment allows an unauthenticated remote attacker to read arbitrary files from the Central Server. This affects Bosch BVMS versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.329 and 7.5 and older. This affects Bosch BVMS Viewer versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.329 and 7.5 and older. This affects Bosch DIVAR IP 3000, DIVAR IP 7000 and DIVAR IP all-in-one 5000 if a vulnerable BVMS version is installed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • Bosch/Video Management System2 versions
    cpe:2.3:a:bosch:video_management_system:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:bosch:video_management_system:*:*:*:*:*:*:*:*range: <=7.5
    • (no CPE)range: 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.329, 7.5 and older
  • Bosch/Video Management System Viewer
    cpe:2.3:a:bosch:video_management_system_viewer:*:*:*:*:*:*:*:*
    Range: <=7.5
  • Bosch/BVMS Viewerllm-fuzzy
    Range: 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.329, 7.5 and older
  • Bosch/Divar IP 3000llm-fuzzy2 versions
    10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.329, 7.5 and older+ 1 more
    • (no CPE)range: 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.329, 7.5 and older
    • (no CPE)range: All
  • Bosch/Divar IP All In One 5000v5
    Range: All

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.