CVE-2020-6777

CVE-2020-6777 is a stored Cross-Site Scripting (XSS) vulnerability affecting the web-based management interfaces of Bosch PRAESIDEO (up to v4.41) and Bosch PRAESENSA (up to v1.10). An authenticated attacker with administrative privileges can inject malicious script code that executes in another user's browser upon login, potentially allowing interaction with the interface under the victim's privileges. Rated Medium (CVSS 4.8), the attack requires high privileges and user interaction, limiting its overall impact as the attacker already possesses administrative control. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.