Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Bosch BVMS 10.0.2, 10.1.1, 11.0.0 Clear all filters
TI-2021-06225 CVE-2021-23862 · GHSA-6226-9vg7-r4w4

Authenticated remote code execution in Bosch BVMS

Priority LOW 35

A crafted configuration packet sent by an authenticated administrative user can be used to execute arbitrary commands in system context.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0144 Published 2021-12-08 Fixed in 11.0.0, 10.0.2 +1 CWE-20
TI-2021-06224 CVE-2021-23861 · GHSA-v7f3-2795-m52v

Possible Access to Debug Functions in Bosch VRM / BVMS

Priority LOW 30

By executing a special command, an user with administrative rights can get access to extended debug functionality on the VRM allowing an impact on integrity or availability of the installed software.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00825 Published 2021-12-08 Fixed in 11.0.0, 10.0.2 +1 CWE-489