CVE-2021-23859

🗓️ 08 Dec 2021 21:17:23Reported by boschType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 58 Views

An unauthenticated attacker can crash a service and send additional commands, impacting Bosch products

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2021-23859	9 Dec 202100:24	–	circl
CNNVD	Bosch 多款产品安全漏洞	8 Dec 202100:00	–	cnnvd
Cvelist	CVE-2021-23859 Denial of Service and Authentication Bypass Vulnerability in multiple Bosch products	8 Dec 202121:17	–	cvelist
EUVD	EUVD-2021-10785	7 Oct 202500:30	–	euvd
NVD	CVE-2021-23859	8 Dec 202122:15	–	nvd
OSV	CVE-2021-23859	8 Dec 202122:15	–	osv
Prion	Design/Logic Flaw	8 Dec 202122:15	–	prion

NVD

Node

bosch bosch_video_management_systemRange≤9.0

bosch bosch_video_management_systemRange10.0–10.0.2

bosch bosch_video_management_systemMatch10.1

bosch bosch_video_management_systemMatch11.0

bosch video_recording_managerRange≤3.81

bosch video_recording_managerRange3.82–3.82.0057

bosch video_recording_managerRange3.83–3.83.0021

bosch video_recording_managerRange4.0–4.00.0070

AND

bosch divar_ip_5000_firmwareMatch-

bosch divar_ip_7000_firmwareMatch-

Node

bosch access_easy_controller_firmwareRange≤2.9.1.0

AND

bosch access_easy_controllerMatch-

Node

bosch access_professional_editionRange≤3.8.0

bosch building_integration_systemRange≤4.9

bosch video_recording_manager_exporterRange2.1–2.10.0008

[
  {
    "product": "BVMS",
    "vendor": "Bosch",
    "versions": [
      {
        "lessThanOrEqual": "9.0.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "11.0.0",
        "status": "affected",
        "version": "11.0",
        "versionType": "custom"
      },
      {
        "lessThan": "10.0.2",
        "status": "affected",
        "version": "10.0",
        "versionType": "custom"
      },
      {
        "lessThan": "10.1.1",
        "status": "affected",
        "version": "10.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "DIVAR IP 7000 R2",
    "vendor": "Bosch",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "product": "DIVAR IP all-in-one 5000",
    "vendor": "Bosch",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "product": "DIVAR IP all-in-one 7000",
    "vendor": "Bosch",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "product": "VRM",
    "vendor": "Bosch",
    "versions": [
      {
        "lessThanOrEqual": "3.81",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "4.00.0070",
        "status": "affected",
        "version": "4.0",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "3.83.0021",
        "status": "affected",
        "version": "3.83",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "3.82.0057",
        "status": "affected",
        "version": "3.82",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "VRM Exporter",
    "vendor": "Bosch",
    "versions": [
      {
        "lessThanOrEqual": "2.10.0008",
        "status": "affected",
        "version": "2.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "APE",
    "vendor": "Bosch",
    "versions": [
      {
        "lessThanOrEqual": "3.8.x.x",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "AEC",
    "vendor": "Bosch",
    "versions": [
      {
        "lessThanOrEqual": "2.9.1.x",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "BIS",
    "vendor": "Bosch",
    "versions": [
      {
        "lessThanOrEqual": "4.9",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "4.8",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "4.7",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
psirt	www.psirt.bosch.com/security-advisories/bosch-sa-043434-bt.html

21 Nov 2024 05:51Current

7.8High risk

Vulners AI Score7.8

CVSS 25

CVSS 3.17.5 - 9.1

EPSS0.0029