CVE-2019-11684

Public PoC / Exploit

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Improper Access Control in the RCP+ server of the Bosch Video Recording Manager (VRM) component allows arbitrary and unauthenticated access to a limited subset of certificates, stored in the underlying Microsoft Windows operating system. The fixed versions implement modified authentication checks. Prior releases of VRM software version 3.70 are considered unaffected. This vulnerability affects VRM v3.70.x, v3.71 < v3.71.0034 and v3.81 < 3.81.0050; DIVAR IP 5000 3.80 < 3.80.0039; BVMS all versions using VRM.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L

Weaknesses (CWE)

CWE-306

Affected Products (15)

bosch · video_recording_manager (up to 3.71.0034)vulnerable

bosch · video_recording_manager (up to 3.81.0050)vulnerable

bosch · divar_ip_5000_firmware (up to 3.80.0039)vulnerable

bosch · divar_ip_5000

bosch · video_management_systemvulnerable

References (2)

https://psirt.bosch.com/security-advisories/bosch-sa-804652.html

Vendor Advisory

https://psirt.bosch.com/security-advisories/bosch-sa-804652.html

Vendor Advisory