CVE-2021-23859: An unauthenticated attacker is able to send a special HTTP request, that causes a service to crash

Description

An unauthenticated attacker is able to send a special HTTP request, that causes a service to crash. In case of a standalone VRM or BVMS with VRM installation this crash also opens the possibility to send further unauthenticated commands to the service. On some products the interface is only local accessible lowering the CVSS base score. For a list of modified CVSS scores, please see the official Bosch Advisory Appendix chapter Modified CVSS Scores for CVE-2021-23859

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

None

Integrity

None

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)1.0% · higher than 63% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

AE

Access Easy Controller Firmware · Bosch

through 2.9.1.0 · source: NVD

AP

Access Professional Edition · Bosch

through 3.8.0 · source: NVD

BV

Bosch Video Management System · Bosch

through 9.0; 10.0 before 10.0.2; 10.1; 11.0 · source: NVD

BI

Building Integration System · Bosch

through 4.9 · source: NVD

VR

Video Recording Manager · Bosch

through 3.81; 3.82 through 3.82.0057; 3.83 through 3.83.0021; 4.0 through 4.00.0070 · source: NVD

VR

Video Recording Manager Exporter · Bosch

2.1 through 2.10.0008 · source: NVD