Read the docs
TI-2020-05485 Aliases CVE-2020-6767GHSA-gf27-32fm-84c5

Path Traversal in Bosch Video Management System (BVMS)

Priority LOW 36CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-22 and the CVSS impact.

Summary

A path traversal vulnerability in the Bosch Video Management System (BVMS) FileTransferService allows an authenticated remote attacker to read arbitrary files from the Central Server. This affects Bosch BVMS versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.329 and 7.5 and older. This affects Bosch BVMS Viewer versions 10.0 <= 10.0.0.1225, 9.0 <= 9.0.0.827, 8.0 <= 8.0.329 and 7.5 and older. This affects Bosch DIVAR IP 3000, DIVAR IP 7000 and DIVAR IP all-in-one 5000 if a vulnerable BVMS version is installed.

Why it matters now

EPSS 0.01308 70th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
BoschDIVAR IP 3000All—No fix listedCNA
BoschDIVAR IP 7000All—No fix listedCNA
BoschDIVAR IP all-in-one 5000All—No fix listedCNA
BoschBosch Video Management System7.0 and older; 7.5 and older; 8.0 through 8.0.0.329; 9.0 through 9.0.0.827; 10.0 through 10.0.0.1225—No fix listedCNA
BoschBVMS Viewer7.0 and older; 7.5 and older; 8.0 through 8.0.0.329; 9.0 through 9.0.0.827; 10.0 through 10.0.0.1225—No fix listedCNA
  • DIVAR IP 3000 VendorBosch Affected All Fixed in — No fix listed CNA
  • DIVAR IP 7000 VendorBosch Affected All Fixed in — No fix listed CNA
  • DIVAR IP all-in-one 5000 VendorBosch Affected All Fixed in — No fix listed CNA
  • Bosch Video Management System VendorBosch Affected 7.0 and older; 7.5 and older; 8.0 through 8.0.0.329; 9.0 through 9.0.0.827; 10.0 through 10.0.0.1225 Fixed in — No fix listed CNA
  • BVMS Viewer VendorBosch Affected 7.0 and older; 7.5 and older; 8.0 through 8.0.0.329; 9.0 through 9.0.0.827; 10.0 through 10.0.0.1225 Fixed in — No fix listed CNA

CPE configurations NVD · 5

CPEVersionsRoleVendor
cpe:2.3:a:bosch:video_management_system_viewer:*:*:*:*:*:*:*:*up to 7.5; 8.0 – 8.0.329; 9.0 – 9.0.0.827; 10.0 – 10.0.0.1225VulnerableBosch
cpe:2.3:a:bosch:video_management_system:*:*:*:*:*:*:*:*up to 7.5; 8.0 – 8.0.0.329; 9.0 – 9.0.0.827; 10.0 – 10.0.0.1225VulnerableBosch
cpe:2.3:h:bosch:divar_ip_3000:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:divar_ip_7000:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:divar_ip_all-in-one_5000:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
  • cpe:2.3:a:bosch:video_management_system_viewer:*:*:*:*:*:*:*:* Versions up to 7.5; 8.0 – 8.0.329; 9.0 – 9.0.0.827; 10.0 – 10.0.0.1225 Vulnerable ·Bosch
  • cpe:2.3:a:bosch:video_management_system:*:*:*:*:*:*:*:* Versions up to 7.5; 8.0 – 8.0.0.329; 9.0 – 9.0.0.827; 10.0 – 10.0.0.1225 Vulnerable ·Bosch
  • cpe:2.3:h:bosch:divar_ip_3000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:divar_ip_7000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:divar_ip_all-in-one_5000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-6767
  2. 2026-10-03 Alias added: GHSA-gf27-32fm-84c5

References

Patch 1

Advisory 1

  • TI-2019-08746 Improper Access Control in Bosch Video Recording Manager CVSS 3.1CRITICAL 9.9
  • TI-2020-05486 Path Traversal in Bosch Video Management System (BVMS) CVSS 3.1HIGH 8.6
  • TI-2023-12744 Information disclosure in Bosch BVMS CVSS 3.1HIGH 7.7
  • TI-2020-05496 Uncontrolled Search Path Element in Bosch BVMS and BVMS Viewer CVSS 3.1HIGH 7.8
  • TI-2019-06461 A Path Traversal vulnerability located in the webserver affects several Bosch hardware… CVSS 3.0MEDIUM 6.5
  • TI-2019-06460 An Open Redirect vulnerability located in the webserver affects several Bosch hardware… CVSS 3.0MEDIUM 6.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences