CVE-2020-6771

Katalog CVE

CVSS 7.8 · High EPSS 0,35%

Kerentanan Uncontrolled Search Path Element pada bosch ip helper. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Loading a DLL through an Uncontrolled Search Path Element in Bosch IP Helper up to and including version 1.00.0008 potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious DLL in the same application directory as the portable IP Helper application.

Rincian

Terbit di NVD

25 Maret 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-427: Uncontrolled Search Path Element

EPSS (30 hari)

0,35% peluang dieksploitasi; lebih tinggi dari 26,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://psirt.bosch.com/security-advisories/bosch-sa-835563-bt.html advisory vendor