Authenticated Remote Code Execution
CVE-2021-23862

7.2HIGH

Key Information:

Vendor: Bosch
Status: Bvms; Divar Ip 7000 R2; Divar Ip All-in-one 5000; Divar Ip All-in-one 7000
Vendor: CVE Published:; 8 December 2021

What is CVE-2021-23862?

A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in system context. This issue also affects installations of the VRM, DIVAR IP, BVMS with VRM installed, the VIDEOJET decoder (VJD-7513 and VJD-8000).

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

BVMS <= 9.0.0

BVMS 11.0 < 11.0.0

BVMS 10.0 < 10.0.2

References

https://psirt.bosch.com/security-advisories/bosch-sa-0434...

x_refsource_CONFIRM

CVSS V3.1

Score:

7.2

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

High

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Dec 8, 2021
Vulnerability Reserved
Jan 12, 2021

JSON

Bosch

What is CVE-2021-23862?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

Affected Version(s)

References

CVSS V3.1

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.