1. Home
  2. CVE Database
  3. CVE-2021-23862
HIGH · 7.2

CVE-2021-23862

A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in system context. This issue also affects installations of the VRM, DIVAR IP, BVM...

Vulnerability Description

A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in system context. This issue also affects installations of the VRM, DIVAR IP, BVMS with VRM installed, the VIDEOJET decoder (VJD-7513 and VJD-8000).

CVSS Score

7.2

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
BoschBosch Video Management System<= 9.0
BoschVideo Recording Manager<= 3.81
BoschDivar Ip 5000 Firmware-
BoschDivar Ip 7000 Firmware-
BoschVideojet Decoder 7513 Firmware<= 10.22.0038
BoschVideojet Decoder 7513-
BoschVideojet Decoder 8000 Firmware<= 10.01.0036
BoschVideojet Decoder 8000-

Related Weaknesses (CWE)

CWE-20CWE-78

References

FAQ

What is CVE-2021-23862?

CVE-2021-23862 is a vulnerability with a CVSS score of 7.2 (HIGH). A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in system context. This issue also affects installations of the VRM, DIVAR IP, BVM...

How severe is CVE-2021-23862?

CVE-2021-23862 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-23862?

Check the references section above for vendor advisories and patch information. Affected products include: Bosch Bosch Video Management System, Bosch Video Recording Manager, Bosch Divar Ip 5000 Firmware, Bosch Divar Ip 7000 Firmware, Bosch Videojet Decoder 7513 Firmware.