PatchTheCVECVE-2021-42261: Revisor Video Management System (VMS) before 2.0.0 has a directory traversal vulnerability
CVE-2021-42261 is a high-severity flaw (CVSS 7.5) affecting video management system. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Revisor Video Management System (VMS) before 2.0.0 has a directory traversal vulnerability. Successful exploitation could allow an attacker to traverse the file system to access files or directories that are outside of restricted directory on the remote server. This could lead to the disclosure of sensitive data on the vulnerable server.
Why this priority
- High severity
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.5 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 2.3% (top 17%) |
| CISA exploited list | No |
| Weakness | CWE-22 |
| Published | 2021-10-19 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2021-42261?
video management system: upgrade to 2.0.0. Exact commands for each OS are on this page.
Is CVE-2021-42261 being exploited?
CVE-2021-42261 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2021-42261 affect?
CVE-2021-42261 affects video management system. Severity is high (CVSS 7.5). Revisor Video Management System (VMS) before 2.0.0 has a directory traversal vulnerability. Successful exploitation could allow an attacker to traverse the file system to access files or directories that are outside of restricted directory
How urgent is CVE-2021-42261?
Priority 52/100. High severity; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2023-34656 HIGH 8.8 UPGRADE An issue was discovered with the JSESSION IDs in Xiamen Si Xin Communication Technology Video management syste
- CVE-2023-28175 HIGH 7.1 UPGRADE UPGRADE Improper Authorization in SSH server in Bosch VMS 11.0, 11.1.0, and 11.1.1 allows a remote authenticated user
- CVE-2020-6785 HIGH 7.8 UPGRADE UPGRADE Loading a DLL through an Uncontrolled Search Path Element in Bosch BVMS and BVMS Viewer in versions 10.1.0, 10
- CVE-2019-11684 CRITICAL 9.9 UPGRADE UPGRADE Improper Access Control in the RCP+ server of the Bosch Video Recording Manager (VRM) component allows arbitra