Lucene search

CVE-2021-23861

🗓️ 08 Dec 2021 22:08:15Reported by boschType

cve🔗 web.nvd.nist.gov👁 20 Views🌐 8 Media mentions

By executing special command, admin user can access extended debug functionality on VRM impacting software integrity or availability. Also affects DIVAR IP, BVMS with VRM installed

Reporter	Title	Published	Views	Family All 3
Cvelist	CVE-2021-23861 Possible Access to Debug Functions in Bosch VRM / BVMS	8 Dec 202121:17	–	cvelist
Prion	Design/Logic Flaw	8 Dec 202122:15	–	prion
NVD	CVE-2021-23861	8 Dec 202122:15	–	nvd

Nvd

Node

bosch bosch_video_management_systemRange≤9.0

bosch bosch_video_management_systemRange10.0–10.0.2

bosch bosch_video_management_systemMatch10.1

bosch bosch_video_management_systemMatch11.0

bosch video_recording_managerRange≤3.81

bosch video_recording_managerRange3.82–3.82.0057

bosch video_recording_managerRange3.83–3.83.0021

bosch video_recording_managerRange4.0–4.00.0070

AND

bosch divar_ip_5000_firmwareMatch-

bosch divar_ip_7000_firmwareMatch-

[
  {
    "product": "BVMS",
    "vendor": "Bosch",
    "versions": [
      {
        "lessThanOrEqual": "9.0.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "11.0.0",
        "status": "affected",
        "version": "11.0",
        "versionType": "custom"
      },
      {
        "lessThan": "10.0.2",
        "status": "affected",
        "version": "10.0",
        "versionType": "custom"
      },
      {
        "lessThan": "10.1.1",
        "status": "affected",
        "version": "10.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "DIVAR IP 7000 R2",
    "vendor": "Bosch",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "product": "DIVAR IP all-in-one 5000",
    "vendor": "Bosch",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "product": "DIVAR IP all-in-one 7000",
    "vendor": "Bosch",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "product": "VRM",
    "vendor": "Bosch",
    "versions": [
      {
        "lessThanOrEqual": "3.81",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "4.00.0070",
        "status": "affected",
        "version": "4.0",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "3.83.0021",
        "status": "affected",
        "version": "3.83",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "3.82.0057",
        "status": "affected",
        "version": "3.82",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
psirt	www.psirt.bosch.com/security-advisories/bosch-sa-043434-bt.html

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

08 Dec 2021 22:15Current

6.4Medium risk

Vulners AI Score6.4

CVSS25.5

CVSS36.5

EPSS0.001

CWE-489