Buffer Overflow for Bosch Video Systems, PSIM and Access Control Systems
Priority MEDIUM 46CWE-787Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-787 and the CVSS impact.
Summary
A recently discovered security vulnerability affects all Bosch Video Management System (BVMS) versions 9.0 and below, DIVAR IP 2000, 3000, 5000 and 7000, Video Recording Manager (VRM), Video Streaming Gateway (VSG), Configuration Manager, Building Integration System (BIS) with Video Engine, Access Professional Edition (APE), Access Easy Controller (AEC), Bosch Video Client (BVC) and Video SDK (VSDK). The vulnerability potentially allows the unauthorized execution of code in the system via the network interface.
Why it matters now
EPSS 0.01988 80th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 25
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:bosch:access_professional_edition:*:*:*:*:*:*:*:* | 3.0 – 3.7 | Vulnerable | Bosch |
| cpe:2.3:a:bosch:bosch_video_client:*:*:*:*:*:*:*:* | before 1.7.6.079 | Vulnerable | Bosch |
| cpe:2.3:a:bosch:bosch_video_management_system:*:*:*:*:*:*:*:* | up to 9.0 | Vulnerable | Bosch |
| cpe:2.3:a:bosch:building_integration_system:*:*:*:*:*:*:*:* | 2.2 – 4.4 | Vulnerable | Bosch |
| cpe:2.3:a:bosch:building_integration_system:4.5:*:*:*:*:*:*:* | 4.5 | Vulnerable | Bosch |
| cpe:2.3:a:bosch:building_integration_system:4.6:*:*:*:*:*:*:* | 4.6 | Vulnerable | Bosch |
| cpe:2.3:a:bosch:building_integration_system:4.6.1:*:*:*:*:*:*:* | 4.6.1 | Vulnerable | Bosch |
| cpe:2.3:a:bosch:configuration_manager:*:*:*:*:*:*:*:* | before 6.10 | Vulnerable | Bosch |
| cpe:2.3:a:bosch:video_recording_manager:*:*:*:*:*:*:*:* | before 3.71.0032; 3.81 to before 3.81.0048 | Vulnerable | Bosch |
| cpe:2.3:a:bosch:video_sdk:*:*:*:*:*:*:*:* | before 6.32.0099 | Vulnerable | Bosch |
- cpe:2.3:a:bosch:access_professional_edition:*:*:*:*:*:*:*:* Versions 3.0 – 3.7 Vulnerable ·Bosch
- cpe:2.3:a:bosch:bosch_video_client:*:*:*:*:*:*:*:* Versions before 1.7.6.079 Vulnerable ·Bosch
- cpe:2.3:a:bosch:bosch_video_management_system:*:*:*:*:*:*:*:* Versions up to 9.0 Vulnerable ·Bosch
- cpe:2.3:a:bosch:building_integration_system:*:*:*:*:*:*:*:* Versions 2.2 – 4.4 Vulnerable ·Bosch
- cpe:2.3:a:bosch:building_integration_system:4.5:*:*:*:*:*:*:* Versions 4.5 Vulnerable ·Bosch
- cpe:2.3:a:bosch:building_integration_system:4.6:*:*:*:*:*:*:* Versions 4.6 Vulnerable ·Bosch
- cpe:2.3:a:bosch:building_integration_system:4.6.1:*:*:*:*:*:*:* Versions 4.6.1 Vulnerable ·Bosch
- cpe:2.3:a:bosch:configuration_manager:*:*:*:*:*:*:*:* Versions before 6.10 Vulnerable ·Bosch
- cpe:2.3:a:bosch:video_recording_manager:*:*:*:*:*:*:*:* Versions before 3.71.0032; 3.81 to before 3.81.0048 Vulnerable ·Bosch
- cpe:2.3:a:bosch:video_sdk:*:*:*:*:*:*:*:* Versions before 6.32.0099 Vulnerable ·Bosch
Show 15 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:bosch:video_streaming_gateway:*:*:*:*:*:*:*:* | before 6.43.0023; 6.45 to before 6.45.0008 | Vulnerable | Bosch |
| cpe:2.3:o:bosch:dip_2000_firmware:*:*:*:*:*:*:*:* | before 0380.037 | Vulnerable | Bosch |
| cpe:2.3:h:bosch:dip_2000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Bosch |
| cpe:2.3:o:bosch:dip_3000_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Bosch |
| cpe:2.3:h:bosch:dip_3000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Bosch |
| cpe:2.3:o:bosch:dip_5000_firmware:*:*:*:*:*:*:*:* | before 038.037 | Vulnerable | Bosch |
| cpe:2.3:h:bosch:dip_5000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Bosch |
| cpe:2.3:o:bosch:dip_7000_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Bosch |
| cpe:2.3:h:bosch:dip_7000:gen1:*:*:*:*:*:*:* | gen1 | Running on | Bosch |
| cpe:2.3:h:bosch:dip_7000:gen2:*:*:*:*:*:*:* | gen2 | Running on | Bosch |
| cpe:2.3:o:bosch:access_easy_controller_firmware:2.1.8.5:*:*:*:*:*:*:* | 2.1.8.5 | Vulnerable | Bosch |
| cpe:2.3:o:bosch:access_easy_controller_firmware:2.1.9.0:*:*:*:*:*:*:* | 2.1.9.0 | Vulnerable | Bosch |
| cpe:2.3:o:bosch:access_easy_controller_firmware:2.1.9.1:*:*:*:*:*:*:* | 2.1.9.1 | Vulnerable | Bosch |
| cpe:2.3:o:bosch:access_easy_controller_firmware:2.1.9.3:*:*:*:*:*:*:* | 2.1.9.3 | Vulnerable | Bosch |
| cpe:2.3:h:bosch:access_easy_controller:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Bosch |
- cpe:2.3:a:bosch:video_streaming_gateway:*:*:*:*:*:*:*:* Versions before 6.43.0023; 6.45 to before 6.45.0008 Vulnerable ·Bosch
- cpe:2.3:o:bosch:dip_2000_firmware:*:*:*:*:*:*:*:* Versions before 0380.037 Vulnerable ·Bosch
- cpe:2.3:h:bosch:dip_2000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
- cpe:2.3:o:bosch:dip_3000_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Bosch
- cpe:2.3:h:bosch:dip_3000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
- cpe:2.3:o:bosch:dip_5000_firmware:*:*:*:*:*:*:*:* Versions before 038.037 Vulnerable ·Bosch
- cpe:2.3:h:bosch:dip_5000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
- cpe:2.3:o:bosch:dip_7000_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Bosch
- cpe:2.3:h:bosch:dip_7000:gen1:*:*:*:*:*:*:* Versions gen1 Running on ·Bosch
- cpe:2.3:h:bosch:dip_7000:gen2:*:*:*:*:*:*:* Versions gen2 Running on ·Bosch
- cpe:2.3:o:bosch:access_easy_controller_firmware:2.1.8.5:*:*:*:*:*:*:* Versions 2.1.8.5 Vulnerable ·Bosch
- cpe:2.3:o:bosch:access_easy_controller_firmware:2.1.9.0:*:*:*:*:*:*:* Versions 2.1.9.0 Vulnerable ·Bosch
- cpe:2.3:o:bosch:access_easy_controller_firmware:2.1.9.1:*:*:*:*:*:*:* Versions 2.1.9.1 Vulnerable ·Bosch
- cpe:2.3:o:bosch:access_easy_controller_firmware:2.1.9.3:*:*:*:*:*:*:* Versions 2.1.9.3 Vulnerable ·Bosch
- cpe:2.3:h:bosch:access_easy_controller:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2019-6957
- 2026-10-03 Alias added: GHSA-rmfq-rhp2-gvm9
References
More Bosch Access Easy Controller Firmware vulnerabilities
- TI-2019-04895 Improper Access Control for Bosch Video Systems, PSIM and Access Control Systems CVSS 3.1CRITICAL 9.1
- TI-2021-06222 Denial of Service and Authentication Bypass Vulnerability in multiple Bosch products CVSS 3.1CRITICAL 9.1
Sources
- CVE-2019-6957 · CVE Program
- CVE-2019-6957 · NVD
- FIRST EPSS
- GHSA-rmfq-rhp2-gvm9 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences