Bosch Video Streaming Gateway vulnerabilities

4 CVEs affecting Bosch Video Streaming Gateway, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-32230, published 2023-12-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-6769, published 2020-02-07. Critical severity, CVSS 9.1. EPSS: 2.2% chance of exploitation in the next 30 days. Missing Authentication for Critical Function in the Bosch Video Streaming Gateway (VSG) allows an unauthenticated remote attacker to retrieve and set arbitrary configuration data of the Video…
CVE-2019-6957, published 2019-05-29. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. A recently discovered security vulnerability affects all Bosch Video Management System (BVMS) versions 9.0 and below, DIVAR IP 2000, 3000, 5000 and 7000, Video Recording Manager (VRM), Video…
CVE-2023-32230, published 2023-12-18. High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days. An improper handling of a malformed API request to an API server in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service (DoS) situation.
CVE-2020-6790, published 2021-03-25. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. Calling an executable through an Uncontrolled Search Path Element in the Bosch Video Streaming Gateway installer up to and including version 6.45.10 potentially allows an attacker to execute…