CVE-2021-23861 Possible Access to Debug Functions in Bosch VRM / BVMS
Administrative users can access extended debug functions, potentially compromising the integrity or availability of Bosch VRM and BVMS installations.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-23861?
CVE-2021-23861 is a medium-severity vulnerability in Bosch BVMS, published on 8 Dec 2021. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
By executing a special command, an user with administrative rights can get access to extended debug functionality on the VRM allowing an impact on integrity or availability of the installed software. This issue also affects installations of the DIVAR IP and BVMS with VRM installed.
Weakness: CWE-489
Which versions are affected by CVE-2021-23861?
It affects 2 products.
Products include Bosch Bosch Video Management System, Bosch Video Recording Manager.
How do I fix CVE-2021-23861?
No fix has been published for CVE-2021-23861 yet. Limit exposure of the affected software until one is available.
Is CVE-2021-23861 being exploited?
There is no known exploitation of CVE-2021-23861 in the wild and no public exploit code.
Other vulnerabilities in Bosch BVMS
Sources
Also known as GHSA-v7f3-2795-m52v.