CVE-2021-23861

MEDIUM

VRM - Privilege Escalation

Title source: llm
STIX 2.1

Description

By executing a special command, an user with administrative rights can get access to extended debug functionality on the VRM allowing an impact on integrity or availability of the installed software. This issue also affects installations of the DIVAR IP and BVMS with VRM installed.

Scores

CVSS v3 6.5
EPSS 0.0030
EPSS Percentile 53.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Details

CWE
CWE-489
Status published
Products (4)
bosch/bosch_video_management_system 10.1
bosch/bosch_video_management_system 11.0
bosch/bosch_video_management_system < 9.0
bosch/video_recording_manager < 3.81
Published Dec 08, 2021
Tracked Since Feb 18, 2026