CVSS 3.1
7.2 highCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVE-2021-23862
High (7.2) in bosch. EPSS 1.4% chance of exploitation in the next 30 days.
A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in system context. This issue also affects installations of the VRM, DIVAR IP, BVMS with VRM installed, the VIDEOJET decoder (VJD-7513 and VJD-8000).
Severity
- EPSS
- 1.4% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-11-01)
- CWEs
- CWE-78, CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Affected
- bosch:bosch_video_management_system
- bosch:video_recording_manager
- bosch:videojet_decoder_7513_firmware
- bosch:videojet_decoder_8000_firmware