VULNERABILITY INTELLIGENCE
CVE-2020-6789
CVSS score7.8 HIGH
EPSS probability0.36%
CISA KEVNot currently listed
Published2021-03-25
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
Loading a DLL through an Uncontrolled Search Path Element in the Bosch Monitor Wall installer up to and including version 10.00.0164 potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious DLL in the same directory where the installer is started from.
Weakness classification
- CWE-427: Uncontrolled Search Path Element
Primary references
- psirt@bosch.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory