CVE-2020-6788

CVE-2020-6788 is a high-severity vulnerability affecting the Bosch Configuration Manager installer up to version 7.21.0078. It allows for arbitrary code execution due to an uncontrolled search path element, where a malicious DLL placed in the installer's directory can be loaded. The attack requires user interaction (UI:R) to trick the victim into placing the DLL, but once executed, it grants high confidentiality, integrity, and availability impact (C:H/I:H/A:H). There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.