Bosch Cpp4_firmware
5 CVEs affecting Bosch Cpp4_firmware. Latest disclosed: 2023-12-18. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-23853 | High | 8.3 | 2021-06-09 | In Bosch IP cameras, improper validation of the HTTP header allows an attacker to inject arbitrary HTTP headers through crafted URLs. |
CVE-2021-23848 | High | 8.3 | 2021-06-09 | An error in the URL handler Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interface. An attacker with knowledge of the c… |
CVE-2021-23849 | High | 7.5 | 2021-08-05 | A vulnerability in the web-based interface allows an unauthenticated remote attacker to trigger actions on an affected system on behalf of another user (CSRF -… |
CVE-2022-41677 | Medium | 5.3 | 2023-12-18 | An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information (like capabiliti… |
CVE-2021-23852 | Medium | 4.9 | 2021-06-09 | An authenticated attacker with administrator rights Bosch IP cameras can call an URL with an invalid parameter that causes the camera to become unresponsive fo… |