By executing a special command, an user with administrative rights can get access to extended debug functionality on the VRM allowing an impact on integrity or availability of the installed software. This issue also affects installations of the DIVAR IP and BVMS with VRM installed.
Weakness
The product is released with debugging code still enabled or active.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Bosch_video_management_system | Bosch | * | 9.0 (including) |
| Bosch_video_management_system | Bosch | 10.0 (including) | 10.0.2 (excluding) |
| Bosch_video_management_system | Bosch | 10.1 (including) | 10.1 (including) |
| Bosch_video_management_system | Bosch | 11.0 (including) | 11.0 (including) |
| Video_recording_manager | Bosch | * | 3.81 (including) |
| Video_recording_manager | Bosch | 3.82 (including) | 3.82.0057 (including) |
| Video_recording_manager | Bosch | 3.83 (including) | 3.83.0021 (including) |
| Video_recording_manager | Bosch | 4.0 (including) | 4.00.0070 (including) |