Cpp7 Firmware (Bosch) - vulnerabilities (CVEs)
7 CVEs, 0 in the last 30 days, 9 known versions, newest CVE from 2023-12-18. Vendor: Bosch.
CVEs of Cpp7 Firmware
- CVE-2022-41677 - CVSS 5.3 (medium), 2023-12-18: An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information (like…
- CVE-2021-23849 - CVSS 8.8 (high), 2021-08-05: A vulnerability in the web-based interface allows an unauthenticated remote attacker to trigger actions on an affected system on behalf of another user (CSRF…
- CVE-2021-23852 - CVSS 4.9 (medium), 2021-06-09: An authenticated attacker with administrator rights Bosch IP cameras can call an URL with an invalid parameter that causes the camera to become unresponsive…
- CVE-2021-23848 - CVSS 8.3 (high), 2021-06-09: An error in the URL handler Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interface. An attacker with knowledge of the…
- CVE-2021-23854 - CVSS 8.3 (high), 2021-06-09: An error in the handling of a page parameter in Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interface. This issue…
- CVE-2021-23847 - CVSS 9.8 (critical), 2021-06-09: A Missing Authentication in Critical Function in Bosch IP cameras allows an unauthenticated remote attacker to extract sensitive information or change…
- CVE-2021-23853 - CVSS 9.8 (critical), 2021-06-09: In Bosch IP cameras, improper validation of the HTTP header allows an attacker to inject arbitrary HTTP headers through crafted URLs.
