VULNERABILITY INTELLIGENCE

CVE-2021-23861

CVSS score6.5 MEDIUM
EPSS probability0.83%
CISA KEVNot currently listed
Published2021-12-08
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Description

By executing a special command, an user with administrative rights can get access to extended debug functionality on the VRM allowing an impact on integrity or availability of the installed software. This issue also affects installations of the DIVAR IP and BVMS with VRM installed.

Weakness classification

  • psirt@bosch.com: CWE-489
  • nvd@nist.gov: NVD-CWE-Other

Primary references