csirt@kutim:~/threat-intel/cve/CVE-2021-23859

Katalog CVE

CVSS 7.5 · High EPSS 1,0%

Kerentanan Improper Check or Handling of Exceptional Conditions pada bosch video management system, bosch video recording manager +4 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

An unauthenticated attacker is able to send a special HTTP request, that causes a service to crash. In case of a standalone VRM or BVMS with VRM installation this crash also opens the possibility to send further unauthenticated commands to the service. On some products the interface is only local accessible lowering the CVSS base score. For a list of modified CVSS scores, please see the official Bosch Advisory Appendix chapter Modified CVSS Scores for CVE-2021-23859

Rincian

Terbit di NVD
8 Desember 2021
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-703: Improper Check or Handling of Exceptional Conditions
CWE-755: Improper Handling of Exceptional Conditions
EPSS (30 hari)
1,0% peluang dieksploitasi; lebih tinggi dari 61,9% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
bosch bosch video management system Semua versi hingga 9.0
bosch bosch video management system Versi 10.0 hingga sebelum 10.0.2
bosch bosch video management system Versi 10.1
bosch bosch video management system Versi 11.0
bosch video recording manager Semua versi hingga 3.81
bosch video recording manager Versi 3.82 hingga 3.82.0057
bosch video recording manager Versi 3.83 hingga 3.83.0021
bosch video recording manager Versi 4.0 hingga 4.00.0070
bosch access easy controller firmware Semua versi hingga 2.9.1.0
bosch access professional edition Semua versi hingga 3.8.0
bosch building integration system Semua versi hingga 4.9
bosch video recording manager exporter Versi 2.1 hingga 2.10.0008

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.