CVE-2020-6790

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Calling an executable through an Uncontrolled Search Path Element in the Bosch Video Streaming Gateway installer up to and including version 6.45.10 potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious exe in the same directory where the installer is started from.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-427

Affected software

No affected versions have been published.

Timeline

Published
Mar 25, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-67924.3When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents. This vulnerability affeCVE-2020-67936.5When processing an email message with an ill-formed envelope, Thunderbird could read data from a random memory location. This vulnerability CVE-2020-67946.5If a user saved passwords before Thunderbird 60 and then later set a master password, an unencrypted copy of these passwords is still accessCVE-2020-67956.5When processing a message that contains multiple S/MIME signatures, a bug in the MIME processing code caused a null pointer dereference, leaCVE-2020-67968.8A content process could have modified shared memory relating to crash reporting information, crash itself, and cause an out-of-bound write. CVE-2020-67974.3By downloading a file with the .fileloc extension, a semi-privileged extension could launch an arbitrary application on the user's computer.CVE-2020-67986.1If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution when it should not be alCVE-2020-67998.8Command line arguments could have been injected during Firefox invocation as a shell handler for certain unsupported file types. This requirCVE-2020-68008.8Mozilla developers and community members reported memory safety bugs present in Firefox 72 and Firefox ESR 68.4. Some of these bugs showed eCVE-2020-68018.8Mozilla developers reported memory safety bugs present in Firefox 72. Some of these bugs showed evidence of memory corruption and we presumeCVE-2020-68026.1In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tagsCVE-2020-68036.1An open redirect is present on the gateway's login page, which could cause a user to be redirected to a malicious site after logging in.