CVE-2019-11684: Improper Access Control in Bosch Video Recording Manager
Improper Access Control in the RCP+ server of the Bosch Video Recording Manager (VRM) component allows arbitrary and unauthenticated access to a limited subset of certificates, stored in the underlying Microsoft Windows operating system. The fixed versions implement modified authentication checks. Prior releases of VRM software version 3.70 are considered unaffected. This vulnerability affects VRM v3.70.x, v3.71 < v3.71.0034 and v3.81 < 3.81.0050; DIVAR IP 5000 3.80 < 3.80.0039; BVMS all versions using VRM.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2019-11684.
What is the title of this vulnerability?
The title of this vulnerability is 'Improper Access Control in the RCP+ server of the Bosch Video Recording Manager (VRM) component allo...'.
What is the severity rating of CVE-2019-11684?
The severity rating of CVE-2019-11684 is 9.8 (Critical).
Which software components are affected by this vulnerability?
The Bosch Video Recording Manager (VRM) component and Bosch Divar Ip 5000 Firmware are affected by this vulnerability.
How can I fix the vulnerability in the affected software?
You can fix the vulnerability in the affected software by updating to the fixed versions, specifically versions 3.70.0062 or 3.81.0038 for the Bosch Video Management System.