What is CVE-2020-6790?

CVE-2020-6790 is a high-severity vulnerability in Bosch Video Streaming Gateway, classified under Uncontrolled Search Path Element. CVSS score: 7.8/10. Published 2021-03-25.

How severe is CVE-2020-6790?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Bosch Video Streaming Gateway

CVE-2020-6790

Calling an executable through an Uncontrolled Search Path Element in the Bosch Video Streaming Gateway installer up to and including version 6.45.10 potentially allows an attacker to execute arbitrary code on a victim's system. A prerequis…

EPSS: 0.001 (19.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Bosch Video Streaming Gateway — versions unspecified

Weakness classification (CWE)

CWE-427 — Uncontrolled Search Path Element

References

psirt.bosch.com/security-advisories/bosch-sa-835563-bt.html (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2020-6790?: CVE-2020-6790 is a high-severity vulnerability in Bosch Video Streaming Gateway, classified under Uncontrolled Search Path Element. CVSS score: 7.8/10. Published 2021-03-25.
How severe is CVE-2020-6790?: High severity. CVSS v3 base score is 7.8 out of 10.