CVE-2020-6787

Name of the Vulnerable Software and Affected Versions: Bosch Video Client versions up to and including 1.7.6.079

Description: The issue allows an attacker to execute arbitrary code on a victim's system by loading a DLL through an uncontrolled search path element in the Bosch Video Client installer. This can happen if the victim is tricked into placing a malicious DLL in the same directory where the installer is started from.

Recommendations: For Bosch Video Client versions up to and including 1.7.6.079, consider removing any untrusted DLLs from the directory where the installer is run to prevent potential exploitation. As a temporary workaround, restrict the execution of the installer to trusted directories only. At the moment, there is no information about a newer version that contains a fix for this vulnerability.