What is CVE-2022-41677?

CVE-2022-41677 is a medium-severity vulnerability in Bosch Camera Firmware, classified under Improper Access Control. CVSS score: 5.3/10. Published 2023-12-18.

How severe is CVE-2022-41677?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Bosch Camera Firmware

CVE-2022-41677

An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information (like capabilities) about the device itself and network settings of the device, disclosing possi…

EPSS: 0.006 (44.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Bosch Camera Firmware — versions 0
Bosch Cpp13
Bosch Cpp13_firmware
Bosch Cpp14
Bosch Cpp14_firmware
Bosch Cpp4
Bosch Cpp4_firmware
Bosch Cpp6
Bosch Cpp6_firmware
Bosch Cpp7

Weakness classification (CWE)

CWE-284 — Improper Access Control

References

psirt@bosch.com (Vendor Advisory)

Frequently asked questions

What is CVE-2022-41677?: CVE-2022-41677 is a medium-severity vulnerability in Bosch Camera Firmware, classified under Improper Access Control. CVSS score: 5.3/10. Published 2023-12-18.
How severe is CVE-2022-41677?: Medium severity. CVSS v3 base score is 5.3 out of 10.