Design/Logic Flaw

2021-12-0822:15:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.0%

JSON

A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in system context. This issue also affects installations of the VRM, DIVAR IP, BVMS with VRM installed, the VIDEOJET decoder (VJD-7513 and VJD-8000).

CPENameOperatorVersion
bosch_video_management_systemle9.0
bosch_video_management_systemge10.0
bosch_video_management_systemlt10.0.2
bosch_video_management_systemeq10.1
bosch_video_management_systemeq11.0
video_recording_managerle3.81
video_recording_managerge3.82
video_recording_managerle3.82.0057
video_recording_managerge3.83
video_recording_managerle3.83.0021

Name	Operator	Version
bosch_video_management_system	le	9.0
bosch_video_management_system	ge	10.0
bosch_video_management_system	lt	10.0.2
bosch_video_management_system	eq	10.1
bosch_video_management_system	eq	11.0
video_recording_manager	le	3.81
video_recording_manager	ge	3.82
video_recording_manager	le	3.82.0057
video_recording_manager	ge	3.83
video_recording_manager	le	3.83.0021