title: Authenticated Remote Code Execution
description: A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in system context. This issue also affects installations of the VRM, DIVAR IP, BVMS with VRM installed, the VIDEOJET decoder (VJD-7513 and VJD-8000).
problem types: CWE-20 Improper Input Validation
affected:
{
product: BVMS
vendor: Bosch
versions:
lessThanOrEqual: 9.0.0, status: affected, version: unspecified, versionType: custom
lessThan: 11.0.0, status: affected, version: 11.0, versionType: custom
lessThan: 10.0.2, status: affected, version: 10.0, versionType: custom
lessThan: 10.1.1, status: affected, version: 10.1, versionType: custom
}
{
product: DIVAR IP 7000 R2
vendor: Bosch
versions:
status: affected, version: all
}
{
product: DIVAR IP all-in-one 5000
vendor: Bosch
versions:
status: affected, version: all
}
{
product: DIVAR IP all-in-one 7000
vendor: Bosch
versions:
status: affected, version: all
}
{
product: VRM
vendor: Bosch
versions:
lessThanOrEqual: 3.81, status: affected, version: unspecified, versionType: custom
lessThanOrEqual: 4.00.0070, status: affected, version: 4.0, versionType: custom
lessThanOrEqual: 3.83.0021, status: affected, version: 3.83, versionType: custom
lessThanOrEqual: 3.82.0057, status: affected, version: 3.82, versionType: custom
}
{
product: VJD-8000
vendor: Bosch
versions:
lessThanOrEqual: 10.01.0036, status: affected, version: unspecified, versionType: custom
}
{
product: VJD-7513
vendor: Bosch
versions:
lessThanOrEqual: 10.22.0038, status: affected, version: unspecified, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.2
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]