CVE:CVE-2019-6958
CNNVD:CNNVD-201905-1061
Bosch DIVAR IP 2000等都是德国Bosch公司的产品。Bosch DIVAR IP 2000是一款2000系列视频录像机。Video Recording Manager（VRM）是一款视频录制管理器。Bosch DIVAR IP 3000是一款3000系列视频录像机。
多款Bosch产品中存在访问控制错误漏洞。该漏洞源于网络系统或产品未正确限制来自未授权角色的资源访问。以下产品及版本受到影响：Bosch Video Management System (BVMS)9.0及之前版本；DIVAR IP 2000；DIVAR IP 3000；DIVAR IP 5000；DIVAR IP 7000；Configuration Manager；Building Integration System (BIS) with Video Engine；Access Professional Edition (APE)；Access Easy Controller (AEC)；Bosch Video Client (BVC)；Video SDK (VSDK)。
solution:Upgrade bosch access_professional_edition to a higher version than 3.7,and avoid the version [3.0,3.7]; Upgrade bosch bosch_video_client to a higher version than 1.7.6.079,and avoid the version (,1.7.6.079); Upgrade bosch bosch_video_management_system to a higher version than 9.0,and avoid the version (,9.0]; Upgrade bosch building_integration_system to a higher version than 4.4,4.5,4.6,4.6.1,and avoid the version [2.2,4.4],4.5,4.6,4.6.1; Upgrade bosch configuration_manager to a higher version than 6.10,and avoid the version (,6.10); Upgrade bosch video_sdk to a higher version than 6.32.0099,and avoid the version (,6.32.0099); Upgrade bosch dip_2000_firmware to a higher version than 0380.037,and avoid the version (,0380.037); Upgrade bosch dip_3000_firmware to a higher version than -; Upgrade bosch dip_5000_firmware to a higher version than 038.037,and avoid the version (,038.037); Upgrade bosch dip_7000_firmware to a higher version than -; Upgrade bosch access_easy_controller_firmware to a higher version than 2.1.8.5,2.1.9.0,2.1.9.1,2.1.9.3,and avoid the version 2.1.8.5,2.1.9.0,2.1.9.1,2.1.9.3