CVE-2019-6958

A recently discovered security vulnerability affects all Bosch Video Management System (BVMS) versions 9.0 and below, DIVAR IP 2000, 3000, 5000 and 7000, Configuration Manager, Building Integration System (BIS) with Video Engine, Access Professional Edition (APE), Access Easy Controller (AEC), Bosch Video Client (BVC) and Video SDK (VSDK). The RCP+ network port allows access without authentication. Adding authentication feature to the respective library fixes the issue. The issue is classified as "CWE-284: Improper Access Control." This vulnerability, for example, allows a potential attacker to delete video or read video data.

• CWE-306

• https://media.boschsecurity.com/fs/media/pb/security_advisories/bosch-2019-0404bt-cve-2019-6958_security_advisory_improper_access_control.pdfMitigation, Vendor Advisory
• https://media.boschsecurity.com/fs/media/pb/security_advisories/bosch-2019-0404bt-cve-2019-6958_security_advisory_improper_access_control.pdfMitigation, Vendor Advisory

Published

May 29, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-6856A CWE-754: Improper Check for Unusual or Exceptional Conditi…7.5
• CVE-2019-6857A CWE-754: Improper Check for Unusual or Exceptional Conditi…7.5
• CVE-2019-6858A CWE-427:Uncontrolled Search Path Element vulnerability exi…7.8
• CVE-2019-6859A CWE-798: Use of Hardcoded Credentials vulnerability exists…7.5
• CVE-2019-6956An issue was discovered in Freeware Advanced Audio Decoder 2…7.1
• CVE-2019-6957A recently discovered security vulnerability affects all Bos…9.8
• CVE-2019-6960An issue was discovered in GitLab Community and Enterprise E…9.8
• CVE-2019-6961Incorrect access control in actionHandlerUtility.php in the …
• CVE-2019-6962A shell injection issue in cosa_wifi_apis.c in the RDK RDKB-…
• CVE-2019-6963A heap-based buffer overflow in cosa_dhcpv4_dml.c in the RDK…
• CVE-2019-6964A heap-based buffer over-read in Service_SetParamStringValue…
• CVE-2019-6965An XSS issue was discovered in i-doit Open 1.12 via the src/…