Improper Access Control for Bosch Video Systems, PSIM and Access Control Systems
Priority MEDIUM 42CWE-306Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-306.
Summary
A recently discovered security vulnerability affects all Bosch Video Management System (BVMS) versions 9.0 and below, DIVAR IP 2000, 3000, 5000 and 7000, Configuration Manager, Building Integration System (BIS) with Video Engine, Access Professional Edition (APE), Access Easy Controller (AEC), Bosch Video Client (BVC) and Video SDK (VSDK). The RCP+ network port allows access without authentication. Adding authentication feature to the respective library fixes the issue. The issue is classified as "CWE-284: Improper Access Control." This vulnerability, for example, allows a potential attacker to delete video or read video data.
Why it matters now
EPSS 0.01515 74th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 23
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:bosch:access_professional_edition:*:*:*:*:*:*:*:* | 3.0 – 3.7 | Vulnerable | Bosch |
| cpe:2.3:a:bosch:bosch_video_client:*:*:*:*:*:*:*:* | before 1.7.6.079 | Vulnerable | Bosch |
| cpe:2.3:a:bosch:bosch_video_management_system:*:*:*:*:*:*:*:* | up to 9.0 | Vulnerable | Bosch |
| cpe:2.3:a:bosch:building_integration_system:*:*:*:*:*:*:*:* | 2.2 – 4.4 | Vulnerable | Bosch |
| cpe:2.3:a:bosch:building_integration_system:4.5:*:*:*:*:*:*:* | 4.5 | Vulnerable | Bosch |
| cpe:2.3:a:bosch:building_integration_system:4.6:*:*:*:*:*:*:* | 4.6 | Vulnerable | Bosch |
| cpe:2.3:a:bosch:building_integration_system:4.6.1:*:*:*:*:*:*:* | 4.6.1 | Vulnerable | Bosch |
| cpe:2.3:a:bosch:configuration_manager:*:*:*:*:*:*:*:* | before 6.10 | Vulnerable | Bosch |
| cpe:2.3:a:bosch:video_sdk:*:*:*:*:*:*:*:* | before 6.32.0099 | Vulnerable | Bosch |
| cpe:2.3:o:bosch:dip_2000_firmware:*:*:*:*:*:*:*:* | before 0380.037 | Vulnerable | Bosch |
- cpe:2.3:a:bosch:access_professional_edition:*:*:*:*:*:*:*:* Versions 3.0 – 3.7 Vulnerable ·Bosch
- cpe:2.3:a:bosch:bosch_video_client:*:*:*:*:*:*:*:* Versions before 1.7.6.079 Vulnerable ·Bosch
- cpe:2.3:a:bosch:bosch_video_management_system:*:*:*:*:*:*:*:* Versions up to 9.0 Vulnerable ·Bosch
- cpe:2.3:a:bosch:building_integration_system:*:*:*:*:*:*:*:* Versions 2.2 – 4.4 Vulnerable ·Bosch
- cpe:2.3:a:bosch:building_integration_system:4.5:*:*:*:*:*:*:* Versions 4.5 Vulnerable ·Bosch
- cpe:2.3:a:bosch:building_integration_system:4.6:*:*:*:*:*:*:* Versions 4.6 Vulnerable ·Bosch
- cpe:2.3:a:bosch:building_integration_system:4.6.1:*:*:*:*:*:*:* Versions 4.6.1 Vulnerable ·Bosch
- cpe:2.3:a:bosch:configuration_manager:*:*:*:*:*:*:*:* Versions before 6.10 Vulnerable ·Bosch
- cpe:2.3:a:bosch:video_sdk:*:*:*:*:*:*:*:* Versions before 6.32.0099 Vulnerable ·Bosch
- cpe:2.3:o:bosch:dip_2000_firmware:*:*:*:*:*:*:*:* Versions before 0380.037 Vulnerable ·Bosch
Show 13 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:bosch:dip_2000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Bosch |
| cpe:2.3:o:bosch:dip_3000_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Bosch |
| cpe:2.3:h:bosch:dip_3000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Bosch |
| cpe:2.3:o:bosch:dip_5000_firmware:*:*:*:*:*:*:*:* | before 038.037 | Vulnerable | Bosch |
| cpe:2.3:h:bosch:dip_5000:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Bosch |
| cpe:2.3:o:bosch:dip_7000_firmware:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Bosch |
| cpe:2.3:h:bosch:dip_7000:gen1:*:*:*:*:*:*:* | gen1 | Running on | Bosch |
| cpe:2.3:h:bosch:dip_7000:gen2:*:*:*:*:*:*:* | gen2 | Running on | Bosch |
| cpe:2.3:o:bosch:access_easy_controller_firmware:2.1.8.5:*:*:*:*:*:*:* | 2.1.8.5 | Vulnerable | Bosch |
| cpe:2.3:o:bosch:access_easy_controller_firmware:2.1.9.0:*:*:*:*:*:*:* | 2.1.9.0 | Vulnerable | Bosch |
| cpe:2.3:o:bosch:access_easy_controller_firmware:2.1.9.1:*:*:*:*:*:*:* | 2.1.9.1 | Vulnerable | Bosch |
| cpe:2.3:o:bosch:access_easy_controller_firmware:2.1.9.3:*:*:*:*:*:*:* | 2.1.9.3 | Vulnerable | Bosch |
| cpe:2.3:h:bosch:access_easy_controller:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Bosch |
- cpe:2.3:h:bosch:dip_2000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
- cpe:2.3:o:bosch:dip_3000_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Bosch
- cpe:2.3:h:bosch:dip_3000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
- cpe:2.3:o:bosch:dip_5000_firmware:*:*:*:*:*:*:*:* Versions before 038.037 Vulnerable ·Bosch
- cpe:2.3:h:bosch:dip_5000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
- cpe:2.3:o:bosch:dip_7000_firmware:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Bosch
- cpe:2.3:h:bosch:dip_7000:gen1:*:*:*:*:*:*:* Versions gen1 Running on ·Bosch
- cpe:2.3:h:bosch:dip_7000:gen2:*:*:*:*:*:*:* Versions gen2 Running on ·Bosch
- cpe:2.3:o:bosch:access_easy_controller_firmware:2.1.8.5:*:*:*:*:*:*:* Versions 2.1.8.5 Vulnerable ·Bosch
- cpe:2.3:o:bosch:access_easy_controller_firmware:2.1.9.0:*:*:*:*:*:*:* Versions 2.1.9.0 Vulnerable ·Bosch
- cpe:2.3:o:bosch:access_easy_controller_firmware:2.1.9.1:*:*:*:*:*:*:* Versions 2.1.9.1 Vulnerable ·Bosch
- cpe:2.3:o:bosch:access_easy_controller_firmware:2.1.9.3:*:*:*:*:*:*:* Versions 2.1.9.3 Vulnerable ·Bosch
- cpe:2.3:h:bosch:access_easy_controller:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2019-6958
- 2026-10-03 Alias added: GHSA-vc9x-cpx3-3533
References
More Bosch Access Easy Controller Firmware vulnerabilities
- TI-2019-04894 Buffer Overflow for Bosch Video Systems, PSIM and Access Control Systems CVSS 3.1CRITICAL 9.8
- TI-2021-06222 Denial of Service and Authentication Bypass Vulnerability in multiple Bosch products CVSS 3.1CRITICAL 9.1
Sources
- CVE-2019-6958 · CVE Program
- CVE-2019-6958 · NVD
- FIRST EPSS
- GHSA-vc9x-cpx3-3533 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences