A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in system context. This issue also affects installations of the VRM, DIVAR IP, BVMS with VRM installed, the VIDEOJET decoder (VJD-7513 and VJD-8000).
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
BVMS
Vendor
Bosch
Product
BVMS
Platforms
Unknown
Default status
Unknown
BVMS · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
Unavailable
9.0.0
None listed
11.0
affected
custom
11.0.0
Unavailable
None listed
10.0
affected
custom
10.0.2
Unavailable
None listed
10.1
affected
custom
10.1.1
Unavailable
None listed
DIVAR IP 7000 R2
Vendor
Bosch
Product
DIVAR IP 7000 R2
Platforms
Unknown
Default status
Unknown
DIVAR IP 7000 R2 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
all
affected
Unavailable
Unavailable
Unavailable
None listed
DIVAR IP all-in-one 5000
Vendor
Bosch
Product
DIVAR IP all-in-one 5000
Platforms
Unknown
Default status
Unknown
DIVAR IP all-in-one 5000 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
all
affected
Unavailable
Unavailable
Unavailable
None listed
DIVAR IP all-in-one 7000
Vendor
Bosch
Product
DIVAR IP all-in-one 7000
Platforms
Unknown
Default status
Unknown
DIVAR IP all-in-one 7000 · Scoped product and version facts