CVE-2018-20299

An issue was discovered in several Bosch Smart Home cameras (360 degree indoor camera and Eyes outdoor camera) with firmware before 6.52.4. A malicious client could potentially succeed in the unauthorized execution of code on the device via the network interface, because there is a buffer overflow in the RCP+ parser of the web server.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-12-19

Last modified

2024-09-16

Weaknesses

CWE-119

Affected products

• 360-indoor Camera Firmware (Bosch)
• Eyes Outdoor Camera Firmware (Bosch)

References

• https://psirt.bosch.com/Advisory/BOSCH-2018-1203.html