Cpp Firmware (Bosch) - vulnerabilities (CVEs)
8 CVEs, 0 in the last 30 days, 6 known versions, newest CVE from 2022-03-30. Vendor: Bosch.
CVEs of Cpp Firmware
- CVE-2021-23851 - CVSS 7.2 (high), 2022-03-30: A specially crafted TCP/IP packet may cause the camera recovery image web interface to crash. It may also cause a buffer overflow which could enable remote…
- CVE-2021-23850 - CVSS 7.2 (high), 2022-03-30: A specially crafted TCP/IP packet may cause a camera recovery image telnet interface to crash. It may also cause a buffer overflow which could enable remote…
- CVE-2021-23849 - CVSS 8.8 (high), 2021-08-05: A vulnerability in the web-based interface allows an unauthenticated remote attacker to trigger actions on an affected system on behalf of another user (CSRF…
- CVE-2021-23852 - CVSS 4.9 (medium), 2021-06-09: An authenticated attacker with administrator rights Bosch IP cameras can call an URL with an invalid parameter that causes the camera to become unresponsive…
- CVE-2021-23848 - CVSS 8.3 (high), 2021-06-09: An error in the URL handler Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interface. An attacker with knowledge of the…
- CVE-2021-23854 - CVSS 8.3 (high), 2021-06-09: An error in the handling of a page parameter in Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interface. This issue…
- CVE-2021-23847 - CVSS 9.8 (critical), 2021-06-09: A Missing Authentication in Critical Function in Bosch IP cameras allows an unauthenticated remote attacker to extract sensitive information or change…
- CVE-2021-23853 - CVSS 9.8 (critical), 2021-06-09: In Bosch IP cameras, improper validation of the HTTP header allows an attacker to inject arbitrary HTTP headers through crafted URLs.
