Skip to content
OpenAdvisories

Product · Bosch

CPP Firmware

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.5
    CVE-2021-23849

    Cross Site Request Forgery (CSRF) vulnerability in web based management interface

    A vulnerability in the web-based interface allows an unauthenticated remote attacker to trigger actions on an affected system on behalf of another user (CSRF - Cross Site Request Forgery). This requires the victim to be tricked into clicking a malicious link …

    Bosch CPP Firmware
  • High 8.3
    CVE-2021-23854

    Reflected XSS in page parameter

    An error in the handling of a page parameter in Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interface. This issue only affects versions 7.7x and 7.6x. All other versions are not affected.

    Bosch CPP Firmware
  • High 8.3
    CVE-2021-23853

    Improper Input Validation of HTTP Headers

    In Bosch IP cameras, improper validation of the HTTP header allows an attacker to inject arbitrary HTTP headers through crafted URLs.

    Bosch CPP Firmware
  • High 8.3
    CVE-2021-23848

    Reflected XSS in URL handler

    An error in the URL handler Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interface. An attacker with knowledge of the camera address can send a crafted link to a user, which will execute javascript code in the context o…

    Bosch CPP Firmware