What is CVE-2023-32229?

CVE-2023-32229 is a medium-severity vulnerability in Bosch Autodome_7000i, classified under CWE-1246. CVSS score: 4.9/10. Published 2023-06-15.

How severe is CVE-2023-32229?

Medium severity. CVSS v3 base score is 4.9 out of 10.

Resource exhaustion in Bosch Autodome_7000i

CVE-2023-32229

Due to an error in the software interface to the secure element chip on Bosch IP cameras of family CPP13 and CPP14, the chip can be permanently damaged when enabling the Stream security option (signing of the video stream) with option MD5…

EPSS: 0.006 (44.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.9 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H.

Affected products

Bosch Autodome_7000i
Bosch Autodome_7100_ir
Bosch Autodome_inteox_7000i
Bosch Camera Firmware — versions 0, 8.50
Bosch Cpp13_firmware
Bosch Cpp14_firmware
Bosch Dinion_7100i_ir
Bosch Dinion_inteox_7100i_ir
Bosch Flexidome_indoor_5100i
Bosch Flexidome_indoor_5100i_ir

Weakness classification (CWE)

CWE-1246
CWE-400 — Uncontrolled Resource Consumption

References

psirt@bosch.com (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2023-32229?: CVE-2023-32229 is a medium-severity vulnerability in Bosch Autodome_7000i, classified under CWE-1246. CVSS score: 4.9/10. Published 2023-06-15.
How severe is CVE-2023-32229?: Medium severity. CVSS v3 base score is 4.9 out of 10.