CVE-2021-23861CWE-489

Possible Access to Debug Functions in Bosch VRM / BVMS

Medium · published December 8, 2021

CVSS v3.1
6.5
EPSS
1%
Percentile
57.0
In the wild
Unconfirmed
What it is

By executing a special command, an user with administrative rights can get access to extended debug functionality on the VRM allowing an impact on integrity or availability of the installed software. This issue also affects installations of the DIVAR IP and BVMS with VRM installed.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00825 · 57.0th percentile
Weakness
CWE-489 · Active Debug Code
Published
2021-12-08T21:17Z
EPSS history
Timeline
  • 08 DEC 21:17Z
    Possible Access to Debug Functions in Bosch VRM / BVMS
    cvelistv5