CVE-2021-23862CWE-20

Authenticated Remote Code Execution

High · published December 8, 2021

CVSS v3.1
7.2
EPSS
1%
Percentile
73.0
In the wild
Unconfirmed
What it is

A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in system context. This issue also affects installations of the VRM, DIVAR IP, BVMS with VRM installed, the VIDEOJET decoder (VJD-7513 and VJD-8000).

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01440 · 73.0th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2021-12-08T21:17Z
EPSS history
Timeline
  • 08 DEC 21:17Z
    Authenticated Remote Code Execution
    cvelistv5