CVE-2020-6786

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Loading a DLL through an Uncontrolled Search Path Element in the Bosch Video Recording Manager installer up to and including version 3.82.0055 for 3.82, up to and including version 3.81.0064 for 3.81 and 3.71 and older potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious DLL in the same directory where the installer is started from.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

No affected versions have been published.

Timeline

Published: Mar 25, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-67877.8Loading a DLL through an Uncontrolled Search Path Element in the Bosch Video Client installer up to and including version 1.7.6.079 potentia CVE-2020-67887.8Loading a DLL through an Uncontrolled Search Path Element in the Bosch Configuration Manager installer up to and including version 7.21.0078 CVE-2020-67897.8Loading a DLL through an Uncontrolled Search Path Element in the Bosch Monitor Wall installer up to and including version 10.00.0164 potenti CVE-2020-67907.8Calling an executable through an Uncontrolled Search Path Element in the Bosch Video Streaming Gateway installer up to and including version CVE-2020-67924.3When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents. This vulnerability affe CVE-2020-67936.5When processing an email message with an ill-formed envelope, Thunderbird could read data from a random memory location. This vulnerability CVE-2020-67946.5If a user saved passwords before Thunderbird 60 and then later set a master password, an unencrypted copy of these passwords is still access CVE-2020-67956.5When processing a message that contains multiple S/MIME signatures, a bug in the MIME processing code caused a null pointer dereference, lea CVE-2020-67968.8A content process could have modified shared memory relating to crash reporting information, crash itself, and cause an out-of-bound write. CVE-2020-67974.3By downloading a file with the .fileloc extension, a semi-privileged extension could launch an arbitrary application on the user's computer.CVE-2020-67986.1If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution when it should not be al CVE-2020-67998.8Command line arguments could have been injected during Firefox invocation as a shell handler for certain unsupported file types. This requir