Design/Logic Flaw

2021-12-0822:15:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.2%

JSON

By executing a special command, an user with administrative rights can get access to extended debug functionality on the VRM allowing an impact on integrity or availability of the installed software. This issue also affects installations of the DIVAR IP and BVMS with VRM installed.

CPENameOperatorVersion
bosch_video_management_systemle9.0
bosch_video_management_systemge10.0
bosch_video_management_systemlt10.0.2
bosch_video_management_systemeq10.1
bosch_video_management_systemeq11.0
video_recording_managerle3.81
video_recording_managerge3.82
video_recording_managerle3.82.0057
video_recording_managerge3.83
video_recording_managerle3.83.0021

Name	Operator	Version
bosch_video_management_system	le	9.0
bosch_video_management_system	ge	10.0
bosch_video_management_system	lt	10.0.2
bosch_video_management_system	eq	10.1
bosch_video_management_system	eq	11.0
video_recording_manager	le	3.81
video_recording_manager	ge	3.82
video_recording_manager	le	3.82.0057
video_recording_manager	ge	3.83
video_recording_manager	le	3.83.0021