fkie_cve-2019-6958
Vulnerability from fkie_nvd
Published
2019-05-29 19:29
Modified
2024-11-21 04:47
Severity ?
9.1 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Summary
A recently discovered security vulnerability affects all Bosch Video Management System (BVMS) versions 9.0 and below, DIVAR IP 2000, 3000, 5000 and 7000, Configuration Manager, Building Integration System (BIS) with Video Engine, Access Professional Edition (APE), Access Easy Controller (AEC), Bosch Video Client (BVC) and Video SDK (VSDK). The RCP+ network port allows access without authentication. Adding authentication feature to the respective library fixes the issue. The issue is classified as "CWE-284: Improper Access Control." This vulnerability, for example, allows a potential attacker to delete video or read video data.
References
cve@mitre.orghttps://media.boschsecurity.com/fs/media/pb/security_advisories/bosch-2019-0404bt-cve-2019-6958_security_advisory_improper_access_control.pdfMitigation, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://media.boschsecurity.com/fs/media/pb/security_advisories/bosch-2019-0404bt-cve-2019-6958_security_advisory_improper_access_control.pdfMitigation, Vendor Advisory
Impacted products
Vendor Product Version
bosch access_professional_edition *
bosch bosch_video_client *
bosch bosch_video_management_system *
bosch building_integration_system *
bosch building_integration_system 4.5
bosch building_integration_system 4.6
bosch building_integration_system 4.6.1
bosch configuration_manager *
bosch video_sdk *
bosch dip_2000_firmware *
bosch dip_2000 -
bosch dip_3000_firmware -
bosch dip_3000 -
bosch dip_5000_firmware *
bosch dip_5000 -
bosch dip_7000_firmware -
bosch dip_7000 gen1
bosch dip_7000 gen2
bosch access_easy_controller_firmware 2.1.8.5
bosch access_easy_controller_firmware 2.1.9.0
bosch access_easy_controller_firmware 2.1.9.1
bosch access_easy_controller_firmware 2.1.9.3
bosch access_easy_controller -


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:bosch:access_professional_edition:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "3B5A626A-B735-4E0B-8BAC-0A26A02D6599",
              "versionEndIncluding": "3.7",
              "versionStartIncluding": "3.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bosch:bosch_video_client:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EFBF448F-005B-48FF-B796-DBC8EAA35323",
              "versionEndExcluding": "1.7.6.079",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bosch:bosch_video_management_system:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0B9DD276-15C0-4942-8899-553F7C190320",
              "versionEndIncluding": "9.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bosch:building_integration_system:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D92BA2E1-8554-4F13-938D-855BC33A59C9",
              "versionEndIncluding": "4.4",
              "versionStartIncluding": "2.2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bosch:building_integration_system:4.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "8585CAE6-8A82-4338-A510-BB1798AC0BE3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bosch:building_integration_system:4.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "05B6AD6C-8FCC-473C-9D9A-91EA6C9A8E3E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bosch:building_integration_system:4.6.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "8E219B63-2423-4D01-BDA9-8128B5E0DC24",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bosch:configuration_manager:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4100A710-A356-4D54-BADE-F6C16947C3F0",
              "versionEndExcluding": "6.10",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:bosch:video_sdk:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F421BFB6-5448-4B86-AEB6-062682F56C10",
              "versionEndExcluding": "6.32.0099",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:bosch:dip_2000_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EC039957-2F53-4080-AB7B-1E2AA4F81790",
              "versionEndExcluding": "0380.037",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:bosch:dip_2000:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BC890021-B200-4743-AB51-03BDC9CB1351",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:bosch:dip_3000_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FAE1D3ED-FE23-4F3B-AE75-2FFBDEF5FDAF",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:bosch:dip_3000:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "ABB194FD-9D50-4420-925F-48E4B2D0C2E7",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:bosch:dip_5000_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E0062D5B-DF47-47AB-A6E7-B00BEA2FBA1E",
              "versionEndExcluding": "038.037",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:bosch:dip_5000:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7EFAEE79-2B7C-4F74-B663-F49F2606AF41",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:bosch:dip_7000_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7731276E-38B9-4B01-B4A3-092A49150B9A",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:bosch:dip_7000:gen1:*:*:*:*:*:*:*",
              "matchCriteriaId": "C8FDECC6-46D7-4EAF-9CBC-06D2F18AADA5",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:bosch:dip_7000:gen2:*:*:*:*:*:*:*",
              "matchCriteriaId": "ED2FF548-939C-4F10-A3E7-02DF342A35B0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:bosch:access_easy_controller_firmware:2.1.8.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "DA449D4D-8AF0-4792-A9CA-8195A4E0082B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:bosch:access_easy_controller_firmware:2.1.9.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "DE6EFC6A-351D-4571-A1F7-1E6AC0B77B22",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:bosch:access_easy_controller_firmware:2.1.9.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "A6B97D59-8692-449F-BA59-C2C2F3E0FDDB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:bosch:access_easy_controller_firmware:2.1.9.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "A3C2E4AA-B871-4B0B-8BD0-8D5440BE8144",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:bosch:access_easy_controller:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "50324AEF-BF89-4AAC-B467-FCF87796AB01",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A recently discovered security vulnerability affects all Bosch Video Management System (BVMS) versions 9.0 and below, DIVAR IP 2000, 3000, 5000 and 7000, Configuration Manager, Building Integration System (BIS) with Video Engine, Access Professional Edition (APE), Access Easy Controller (AEC), Bosch Video Client (BVC) and Video SDK (VSDK). The RCP+ network port allows access without authentication. Adding authentication feature to the respective library fixes the issue. The issue is classified as \"CWE-284: Improper Access Control.\" This vulnerability, for example, allows a potential attacker to delete video or read video data."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de seguridad encontrada recientemente impacta a todas las versiones 9.0 y siguientes de Bosch Video Management System (BVMS), DIVAR IP 2000, 3000, 5000 y 7000, Configuration Manager, Building Integration System (BIS) with Video Engine, Access Professional Edition (APE), Access Easy Controller (AEC), Bosch Video Client (BVC) and Video SDK (VSDK). El puerto de red RCP+ permite acceso sin autenticaci\u00f3n. La adici\u00f3n de la funci\u00f3n authentication a la biblioteca correspondiente soluciona el problema. El problema es clasificado como \"CWE-284: Improper Access Control\". Esta vulnerabilidad, por ejemplo, permite a un potencial atacante eliminar un v\u00eddeo o leer datos de un v\u00eddeo."
    }
  ],
  "id": "CVE-2019-6958",
  "lastModified": "2024-11-21T04:47:18.280",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 6.4,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 4.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "cve@mitre.org",
        "type": "Secondary"
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 9.1,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.2,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2019-05-29T19:29:00.703",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Mitigation",
        "Vendor Advisory"
      ],
      "url": "https://media.boschsecurity.com/fs/media/pb/security_advisories/bosch-2019-0404bt-cve-2019-6958_security_advisory_improper_access_control.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Mitigation",
        "Vendor Advisory"
      ],
      "url": "https://media.boschsecurity.com/fs/media/pb/security_advisories/bosch-2019-0404bt-cve-2019-6958_security_advisory_improper_access_control.pdf"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-306"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.