CVE-2019-6958
Summary
| CVE | CVE-2019-6958 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-05-29 19:29:00 UTC |
| Updated | 2023-01-31 21:04:00 UTC |
| Description | A recently discovered security vulnerability affects all Bosch Video Management System (BVMS) versions 9.0 and below, DIVAR IP 2000, 3000, 5000 and 7000, Configuration Manager, Building Integration System (BIS) with Video Engine, Access Professional Edition (APE), Access Easy Controller (AEC), Bosch Video Client (BVC) and Video SDK (VSDK). The RCP+ network port allows access without authentication. Adding authentication feature to the respective library fixes the issue. The issue is classified as "CWE-284: Improper Access Control." This vulnerability, for example, allows a potential attacker to delete video or read video data. |
Risk And Classification
Problem Types: CWE-306
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Bosch | Access Easy Controller | - | All | All | All |
| Hardware | Bosch | Access Easy Controller | - | All | All | All |
| Operating System | Bosch | Access Easy Controller Firmware | 2.1.8.5 | All | All | All |
| Operating System | Bosch | Access Easy Controller Firmware | 2.1.9.0 | All | All | All |
| Operating System | Bosch | Access Easy Controller Firmware | 2.1.9.1 | All | All | All |
| Operating System | Bosch | Access Easy Controller Firmware | 2.1.9.3 | All | All | All |
| Operating System | Bosch | Access Easy Controller Firmware | 2.1.8.5 | All | All | All |
| Operating System | Bosch | Access Easy Controller Firmware | 2.1.9.0 | All | All | All |
| Operating System | Bosch | Access Easy Controller Firmware | 2.1.9.1 | All | All | All |
| Operating System | Bosch | Access Easy Controller Firmware | 2.1.9.3 | All | All | All |
| Application | Bosch | Access Professional Edition | All | All | All | All |
| Application | Bosch | Bosch Video Client | All | All | All | All |
| Application | Bosch | Bosch Video Client | All | All | All | All |
| Application | Bosch | Bosch Video Management System | All | All | All | All |
| Application | Bosch | Building Integration System | 4.5 | All | All | All |
| Application | Bosch | Building Integration System | 4.6 | All | All | All |
| Application | Bosch | Building Integration System | 4.6.1 | All | All | All |
| Application | Bosch | Building Integration System | 4.5 | All | All | All |
| Application | Bosch | Building Integration System | 4.6 | All | All | All |
| Application | Bosch | Building Integration System | 4.6.1 | All | All | All |
| Application | Bosch | Building Integration System | All | All | All | All |
| Application | Bosch | Configuration Manager | All | All | All | All |
| Application | Bosch | Configuration Manager | All | All | All | All |
| Hardware | Bosch | Dip 2000 | - | All | All | All |
| Hardware | Bosch | Dip 2000 | - | All | All | All |
| Operating System | Bosch | Dip 2000 Firmware | All | All | All | All |
| Operating System | Bosch | Dip 2000 Firmware | All | All | All | All |
| Hardware | Bosch | Dip 3000 | - | All | All | All |
| Hardware | Bosch | Dip 3000 | - | All | All | All |
| Operating System | Bosch | Dip 3000 Firmware | - | All | All | All |
| Operating System | Bosch | Dip 3000 Firmware | - | All | All | All |
| Hardware | Bosch | Dip 5000 | - | All | All | All |
| Hardware | Bosch | Dip 5000 | - | All | All | All |
| Operating System | Bosch | Dip 5000 Firmware | All | All | All | All |
| Operating System | Bosch | Dip 5000 Firmware | All | All | All | All |
| Hardware | Bosch | Dip 7000 | gen1 | All | All | All |
| Hardware | Bosch | Dip 7000 | gen2 | All | All | All |
| Hardware | Bosch | Dip 7000 | gen1 | All | All | All |
| Hardware | Bosch | Dip 7000 | gen2 | All | All | All |
| Operating System | Bosch | Dip 7000 Firmware | - | All | All | All |
| Operating System | Bosch | Dip 7000 Firmware | - | All | All | All |
| Application | Bosch | Video Sdk | All | All | All | All |
| Application | Bosch | Video Sdk | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| media.boschsecurity.com/fs/media/pb/security_advisories/bosch-2019-0404bt-cve-2019-69... | CONFIRM | media.boschsecurity.com | Mitigation, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.