Security readout for executives and security teams
Plain-English summary
This flaw can let malicious code run when affected Bosch video management software or its installer loads a DLL from an unsafe search path. It requires local access and user interaction, but successful exploitation could fully compromise the victim system.
Executive priority
Treat this as a high-priority hygiene and hardening issue for physical security environments. It is not remotely exploitable from the CVE data, but a compromised BVMS workstation or server could affect security monitoring operations and sensitive video access.
Technical view
CVE-2020-6785 is CWE-427 in Bosch BVMS and BVMS Viewer. Affected installers and installed applications can load a DLL through an uncontrolled search path. CVSS 3.1 is 7.8 with local attack vector, low complexity, no privileges required, user interaction required, and high confidentiality, integrity, and availability impact.
Likely exposure
Exposure is likely where Bosch BVMS or BVMS Viewer 10.1.0, 10.0.1, 10.0.0, 9.0.0, or older are installed or retained as installers. DIVAR IP 7000 R2, all-in-one 5000, and all-in-one 7000 are exposed when bundled BVMS is before 10.1.1.
Exploitation context
The source bundle does not show CISA KEV listing or other evidence of active exploitation. The attack is local and requires user interaction, so risk is highest on workstations or management servers where users install or launch affected Bosch software from writable or untrusted locations.
Researcher notes
The provided evidence identifies affected versions and impact but does not detail exact DLL names, load locations, or exploitation prerequisites. Avoid assuming active exploitation. Focus research on version confirmation, installer handling, endpoint telemetry, and Bosch advisory updates.
Mitigation direction
- Upgrade affected BVMS and BVMS Viewer deployments to BVMS 10.1.1 or later vendor-supported fixed versions.
- Update DIVAR IP systems that include affected BVMS versions before 10.1.1.
- Remove or quarantine old vulnerable installers from shares, desktops, and software repositories.
- Check Bosch PSIRT guidance before applying compensating controls or exceptions.
- Limit write access to directories used for software installation and launch paths.
Validation and detection
- Inventory installed Bosch BVMS and BVMS Viewer versions across endpoints and servers.
- Search software repositories and file shares for affected BVMS installers.
- Confirm DIVAR IP appliances are not running bundled BVMS versions before 10.1.1.
- Review endpoint telemetry for unusual DLL loads around BVMS installation or launch events.
- Prioritize validation on video management servers and operator workstations.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-427: Exact CWE lookup
Use the exact CWE identifier as the starting point before reviewing related ATT&CK behavior. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupExecution behavior lookup
The CVE wording references code or command execution, so execution technique review may help defensive triage. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.
Open ATT&CK lookupCVE-2020-6785 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- High
- CVSS
- 7.8 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H1.85.9Primary CVE scoreVulnerability scoring details
Base CVSS 3.1 score
7.8HighVector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Source materials
- CVE List V5 sourceCVE List V5
- https://psirt.bosch.com/security-advisories/bosch-sa-835563-bt.htmlCVE reference · x_refsource_CONFIRM
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Uncontrolled Search Path Element
Uncontrolled Search Path Element represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.