CVE-2020-6785: Bosch Video Management System

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Loading a DLL through an Uncontrolled Search Path Element in Bosch BVMS and BVMS Viewer in versions 10.1.0, 10.0.1, 10.0.0 and 9.0.0 and older potentially allows an attacker to execute arbitrary code on a victim's system. This affects both the installer as well as the installed application. This also affects Bosch DIVAR IP 7000 R2, Bosch DIVAR IP all-in-one 5000 and Bosch DIVAR IP all-in-one 7000 with installers and installed BVMS versions prior to BVMS 10.1.1.

Affected products

• Bosch Video Management System: before 9.0 (fixed in 9.0); from 10.0, before 10.0.2 (fixed in 10.0.2); from 10.1, before 10.1.1 (fixed in 10.1.1)
• Bosch Video Management System Viewer: before 9.0 (fixed in 9.0); from 10.0, before 10.0.2 (fixed in 10.0.2); from 10.1.0, before 10.1.1 (fixed in 10.1.1)

Published 2021-03-25. Last modified 2026-06-17.