CVE-2021-23861

Published: Dec 8, 2021Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Exploitability: 1.2 / Impact: 5.2

Source: NVD

Description

By executing a special command, an user with administrative rights can get access to extended debug functionality on the VRM allowing an impact on integrity or availability of the installed software. This issue also affects installations of the DIVAR IP and BVMS with VRM installed.

Affected (8)

Products: Bosch: Bosch Video Management System, Video Recording Manager

Bosch

2 products

Bosch Video Management System

Video Recording Manager

Configuration A

8 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Bosch Bosch Video Management System	Up to 9.0
Bosch Bosch Video Management System	From 10.0 to 10.0.2
Bosch Bosch Video Management System	Version 10.1
Bosch Bosch Video Management System	Version 11.0
Bosch Video Recording Manager	Up to 3.81
Bosch Video Recording Manager	From 3.82 to 3.82.0057
Bosch Video Recording Manager	From 3.83 to 3.83.0021
Bosch Video Recording Manager	From 4.0 to 4.00.0070

Running on/with	Platform Versions
Bosch Divar Ip 5000 Firmware	All versions
Bosch Divar Ip 7000 Firmware	All versions

Related CWEs

CWE-489

Active Debug Code

The product is deployed to unauthorized actors with debugging code still enabled or active, which can create unintended entry points or expose sensitive information.

References (2)

https://psirt.bosch.com/security-advisories/bosch-sa-043434-bt.html

Source: psirt@bosch.com

Vendor Advisory

https://psirt.bosch.com/security-advisories/bosch-sa-043434-bt.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.