CVE-2021-23862

🗓️ 08 Dec 2021 21:17:37Reported by boschType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 40 Views

Crafted config packet allows arbitrary command executio

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2021-23862	9 Dec 202100:24	–	circl
CNNVD	多款Bosch产品操作系统命令注入漏洞	8 Dec 202100:00	–	cnnvd
Cvelist	CVE-2021-23862 Authenticated Remote Code Execution	8 Dec 202121:17	–	cvelist
EUVD	EUVD-2021-10788	7 Oct 202500:30	–	euvd
NVD	CVE-2021-23862	8 Dec 202122:15	–	nvd
OSV	CVE-2021-23862	8 Dec 202122:15	–	osv
Prion	Design/Logic Flaw	8 Dec 202122:15	–	prion
Positive Technologies	PT-2021-15575 · Bosch · Vrm +3	8 Dec 202100:00	–	ptsecurity

NVD

Node

bosch bosch_video_management_systemRange≤9.0

bosch bosch_video_management_systemRange10.0–10.0.2

bosch bosch_video_management_systemMatch10.1

bosch bosch_video_management_systemMatch11.0

bosch video_recording_managerRange≤3.81

bosch video_recording_managerRange3.82–3.82.0057

bosch video_recording_managerRange3.83–3.83.0021

bosch video_recording_managerRange4.0–4.00.0070

AND

bosch divar_ip_5000_firmwareMatch-

bosch divar_ip_7000_firmwareMatch-

Node

bosch videojet_decoder_7513_firmwareRange≤10.22.0038

AND

bosch videojet_decoder_7513Match-

Node

bosch videojet_decoder_8000_firmwareRange≤10.01.0036

AND

bosch videojet_decoder_8000Match-

[
  {
    "product": "BVMS",
    "vendor": "Bosch",
    "versions": [
      {
        "lessThanOrEqual": "9.0.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "11.0.0",
        "status": "affected",
        "version": "11.0",
        "versionType": "custom"
      },
      {
        "lessThan": "10.0.2",
        "status": "affected",
        "version": "10.0",
        "versionType": "custom"
      },
      {
        "lessThan": "10.1.1",
        "status": "affected",
        "version": "10.1",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "DIVAR IP 7000 R2",
    "vendor": "Bosch",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "product": "DIVAR IP all-in-one 5000",
    "vendor": "Bosch",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "product": "DIVAR IP all-in-one 7000",
    "vendor": "Bosch",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "product": "VRM",
    "vendor": "Bosch",
    "versions": [
      {
        "lessThanOrEqual": "3.81",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "4.00.0070",
        "status": "affected",
        "version": "4.0",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "3.83.0021",
        "status": "affected",
        "version": "3.83",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "3.82.0057",
        "status": "affected",
        "version": "3.82",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "VJD-8000",
    "vendor": "Bosch",
    "versions": [
      {
        "lessThanOrEqual": "10.01.0036",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "VJD-7513",
    "vendor": "Bosch",
    "versions": [
      {
        "lessThanOrEqual": "10.22.0038",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
psirt	www.psirt.bosch.com/security-advisories/bosch-sa-043434-bt.html

21 Nov 2024 05:51Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.2

CVSS 29

EPSS0.00528