title: Path Traversal in Bosch Video Management System (BVMS)
description: A path traversal vulnerability in the Bosch Video Management System (BVMS) NoTouch deployment allows an unauthenticated remote attacker to read arbitrary files from the Central Server. This affects Bosch BVMS versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.329 and 7.5 and older. This affects Bosch BVMS Viewer versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.329 and 7.5 and older. This affects Bosch DIVAR IP 3000, DIVAR IP 7000 and DIVAR IP all-in-one 5000 if a vulnerable BVMS version is installed.
problem types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
affected:
{
product: DIVAR IP 3000
vendor: Bosch
versions:
status: affected, version: All
}
{
product: DIVAR IP 7000
vendor: Bosch
versions:
status: affected, version: All
}
{
product: DIVAR IP all-in-one 5000
vendor: Bosch
versions:
status: affected, version: All
}
{
product: Bosch Video Management System
vendor: Bosch
versions:
lessThanOrEqual: 7.5, status: affected, version: unspecified, versionType: custom
lessThanOrEqual: 8.0.0.329, status: affected, version: unspecified, versionType: custom
lessThanOrEqual: 9.0.0.827, status: affected, version: unspecified, versionType: custom
lessThanOrEqual: 10.0.0.1225, status: affected, version: unspecified, versionType: custom
}
{
product: BVMS Viewer
vendor: Bosch
versions:
lessThanOrEqual: 7.5, status: affected, version: unspecified, versionType: custom
lessThanOrEqual: 8.0.0.329, status: affected, version: unspecified, versionType: custom
lessThanOrEqual: 9.0.0.827, status: affected, version: unspecified, versionType: custom
lessThanOrEqual: 10.0.0.1225, status: affected, version: unspecified, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 8.6
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
version: 3.1
]