Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2020-6769 Details

Description

Missing Authentication for Critical Function in the Bosch Video Streaming Gateway (VSG) allows an unauthenticated remote attacker to retrieve and set arbitrary configuration data of the Video Streaming Gateway. A successful attack can impact the confidentiality and availability of live and recorded video data of all cameras configured to be controlled by the VSG as well as the recording storage associated with the VSG. This affects Bosch Video Streaming Gateway versions 6.45 <= 6.45.08, 6.44 <= 6.44.022, 6.43 <= 6.43.0023 and 6.42.10 and older. This affects Bosch DIVAR IP 3000, DIVAR IP 7000 and DIVAR IP all-in-one 5000 if a vulnerable VSG version is installed with BVMS. This affects Bosch DIVAR IP 2000 <= 3.62.0019 and DIVAR IP 5000 <= 3.80.0039 if the corresponding port 8023 has been opened in the device's firewall.

Metrics

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://psirt.bosch.com/security-advisories/BOSCH-SA-260625-BT.html CVEPatchVendor Advisory
https://psirt.bosch.com/security-advisories/BOSCH-SA-260625-BT.html [email protected]PatchVendor Advisory

Weakness Enumeration

CWE-IDCWE NameSource
CWE-306Missing Authentication for Critical Function[email protected]
CWE-306Missing Authentication for Critical Function[email protected]

Affected Products

ProductVersions

Change History

4 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2020-6769
NVD Published Date:
Feb 7, 2020
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2020-6769 Details - Not Deferred