By executing a special command, an user with administrative rights can get access to extended debug functionality on the VRM allowing an impact on integrity or availability of the installed software. This issue also affects installations of the DIVAR IP and BVMS with VRM installed.
The product is deployed to unauthorized actors with debugging code still enabled or active, which can create unintended entry points or expose sensitive information.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Bosch_video_management_system | Bosch | * | 9.0 (including) |
| Bosch_video_management_system | Bosch | 10.0 (including) | 10.0.2 (excluding) |
| Bosch_video_management_system | Bosch | 10.1 (including) | 10.1 (including) |
| Bosch_video_management_system | Bosch | 11.0 (including) | 11.0 (including) |
| Video_recording_manager | Bosch | * | 3.81 (including) |
| Video_recording_manager | Bosch | 3.82 (including) | 3.82.0057 (including) |
| Video_recording_manager | Bosch | 3.83 (including) | 3.83.0021 (including) |
| Video_recording_manager | Bosch | 4.0 (including) | 4.00.0070 (including) |