Bosch Configuration Manager vulnerabilities

4 CVEs affecting Bosch Configuration Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-35867, published 2023-12-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-6957, published 2019-05-29. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. A recently discovered security vulnerability affects all Bosch Video Management System (BVMS) versions 9.0 and below, DIVAR IP 2000, 3000, 5000 and 7000, Video Recording Manager (VRM), Video…
CVE-2019-6958, published 2019-05-29. Critical severity, CVSS 9.1. EPSS: 1.5% chance of exploitation in the next 30 days. A recently discovered security vulnerability affects all Bosch Video Management System (BVMS) versions 9.0 and below, DIVAR IP 2000, 3000, 5000 and 7000, Configuration Manager, Building Integration…
CVE-2023-35867, published 2023-12-18. Medium severity, CVSS 5.9. EPSS: 0.6% chance of exploitation in the next 30 days. An improper handling of a malformed API answer packets to API clients in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service (DoS) situation. To exploit this…
CVE-2020-6788, published 2021-03-25. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Loading a DLL through an Uncontrolled Search Path Element in the Bosch Configuration Manager installer up to and including version 7.21.0078 potentially allows an attacker to execute arbitrary code…