Bosch Cpp6_firmware
7 CVEs affecting Bosch Cpp6_firmware. Latest disclosed: 2023-12-18. Critical: 1, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-23847 | Critical | 9.8 | 2021-06-09 | A Missing Authentication in Critical Function in Bosch IP cameras allows an unauthenticated remote attacker to extract sensitive information or change settings… |
CVE-2021-23854 | High | 8.3 | 2021-06-09 | An error in the handling of a page parameter in Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interface. This issue only… |
CVE-2021-23853 | High | 8.3 | 2021-06-09 | In Bosch IP cameras, improper validation of the HTTP header allows an attacker to inject arbitrary HTTP headers through crafted URLs. |
CVE-2021-23848 | High | 8.3 | 2021-06-09 | An error in the URL handler Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interface. An attacker with knowledge of the c… |
CVE-2021-23849 | High | 7.5 | 2021-08-05 | A vulnerability in the web-based interface allows an unauthenticated remote attacker to trigger actions on an affected system on behalf of another user (CSRF -… |
CVE-2022-41677 | Medium | 5.3 | 2023-12-18 | An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information (like capabiliti… |
CVE-2021-23852 | Medium | 4.9 | 2021-06-09 | An authenticated attacker with administrator rights Bosch IP cameras can call an URL with an invalid parameter that causes the camera to become unresponsive fo… |