CVEvulnerability

CVE-2021-23862

7.2 HIGH Published 2021-12-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-12-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-20, CWE-78

Description

A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in system context. This issue also affects installations of the VRM, DIVAR IP, BVMS with VRM installed, the VIDEOJET decoder (VJD-7513 and VJD-8000).

Affected configurations

• bosch bosch video management system (<= 9.0) • bosch bosch video management system (>= 10.0 < 10.0.2) • bosch bosch video management system 10.1 • bosch bosch video management system 11.0 • bosch video recording manager (<= 3.81) • bosch video recording manager (>= 3.82 <= 3.82.0057) • bosch video recording manager (>= 3.83 <= 3.83.0021) • bosch video recording manager (>= 4.0 <= 4.00.0070) • bosch videojet decoder 7513 firmware (<= 10.22.0038) • bosch videojet decoder 8000 firmware (<= 10.01.0036)

Related

Weakness · CWE (2)

  • CWE-20 Improper Input Validation weakness
  • CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness

References