CVE-2021-23862

A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in system context. This issue also affects installations of the VRM, DIVAR IP, BVMS with VRM installed, the VIDEOJET decoder (VJD-7513 and VJD-8000).

CVSS v3.0 7.2 HIGH
CVSS v2.0 9.0 HIGH

7.2^/10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

9.0^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability : 8.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
https://psirt.bosch.com/security-advisories/bosch-sa-043434-bt.html	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:bosch:bosch_video_management_system::::::::
	cpe:2.3:a:bosch:video_recording_manager::::::::
	cpe:2.3:a:bosch:video_recording_manager::::::::
	cpe:2.3:a:bosch:video_recording_manager::::::::
	cpe:2.3:a:bosch:bosch_video_management_system:11.0:::::::*
	cpe:2.3:a:bosch:bosch_video_management_system::::::::
	cpe:2.3:a:bosch:bosch_video_management_system:10.1:::::::*
	cpe:2.3:a:bosch:video_recording_manager::::::::

OR	cpe:2.3:o:bosch:divar_ip_7000_firmware:-:::::::*
	cpe:2.3:o:bosch:divar_ip_5000_firmware:-:::::::*

Configuration 2 (hide)

AND

cpe:2.3:o:bosch:videojet_decoder_7513_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:bosch:videojet_decoder_7513:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:o:bosch:videojet_decoder_8000_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:bosch:videojet_decoder_8000:-:*:*:*:*:*:*:*

Information

Published : 2021-12-08 14:15

Updated : 2022-08-30 11:34

NVD link : CVE-2021-23862

Mitre link : CVE-2021-23862

JSON object : View

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Products Affected

bosch

videojet_decoder_8000
videojet_decoder_7513
videojet_decoder_8000_firmware
divar_ip_7000_firmware
bosch_video_management_system
videojet_decoder_7513_firmware
divar_ip_5000_firmware
video_recording_manager

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://psirt.bosch.com/security-advisories/bosch-sa-043434-bt.html", "name": "https://psirt.bosch.com/security-advisories/bosch-sa-043434-bt.html", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in system context. This issue also affects installations of the VRM, DIVAR IP, BVMS with VRM installed, the VIDEOJET decoder (VJD-7513 and VJD-8000)."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-78"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2021-23862", "ASSIGNER": "psirt@bosch.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 9.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", "authentication": "SINGLE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "acInsufInfo": false, "impactScore": 10.0, "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}, "baseMetricV3": {"cvssV3": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}}, "publishedDate": "2021-12-08T22:15Z", "configurations": {"nodes": [{"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:bosch:bosch_video_management_system:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "9.0"}, {"cpe23Uri": "cpe:2.3:a:bosch:video_recording_manager:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "4.00.0070", "versionStartIncluding": "4.0"}, {"cpe23Uri": "cpe:2.3:a:bosch:video_recording_manager:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "3.83.0021", "versionStartIncluding": "3.83"}, {"cpe23Uri": "cpe:2.3:a:bosch:video_recording_manager:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "3.82.0057", "versionStartIncluding": "3.82"}, {"cpe23Uri": "cpe:2.3:a:bosch:bosch_video_management_system:11.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:bosch:bosch_video_management_system:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "10.0.2", "versionStartIncluding": "10.0"}, {"cpe23Uri": "cpe:2.3:a:bosch:bosch_video_management_system:10.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:bosch:video_recording_manager:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "3.81"}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:bosch:divar_ip_7000_firmware:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}, {"cpe23Uri": "cpe:2.3:o:bosch:divar_ip_5000_firmware:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}, {"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:bosch:videojet_decoder_7513_firmware:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "10.22.0038"}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:bosch:videojet_decoder_7513:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}, {"children": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:bosch:videojet_decoder_8000_firmware:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "10.01.0036"}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:bosch:videojet_decoder_8000:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": false}]}], "operator": "AND", "cpe_match": []}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2022-08-30T18:34Z"}

7.2 /10