CVE-2019-11684

CVE-2019-11684 is a critical improper access control vulnerability in the RCP+ server of Bosch Video Recording Manager (VRM) and related products, including DIVAR IP 5000 and BVMS. It allows unauthenticated attackers to access a limited subset of certificates stored on the underlying Windows OS. With a CVSS score of 9.8 (Critical), this vulnerability poses a high risk due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.