Cpp4 Firmware (Bosch) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-12-18. Vendor: Bosch.

CVEs of Cpp4 Firmware

• CVE-2022-41677 - CVSS 5.3 (medium), 2023-12-18: An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information (like…
• CVE-2021-23849 - CVSS 8.8 (high), 2021-08-05: A vulnerability in the web-based interface allows an unauthenticated remote attacker to trigger actions on an affected system on behalf of another user (CSRF…
• CVE-2021-23852 - CVSS 4.9 (medium), 2021-06-09: An authenticated attacker with administrator rights Bosch IP cameras can call an URL with an invalid parameter that causes the camera to become unresponsive…
• CVE-2021-23848 - CVSS 8.3 (high), 2021-06-09: An error in the URL handler Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interface. An attacker with knowledge of the…
• CVE-2021-23853 - CVSS 9.8 (critical), 2021-06-09: In Bosch IP cameras, improper validation of the HTTP header allows an attacker to inject arbitrary HTTP headers through crafted URLs.