Skip to content
OpenAdvisories
High · 8.3 CVE-2021-23854 EUVD-2021-10780GHSA-94vj-9xx8-7g9f

Reflected XSS in page parameter

Published Jun 9, 2021 · Updated Sep 16, 2024 · Assigned by bosch

Description

An error in the handling of a page parameter in Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interface. This issue only affects versions 7.7x and 7.6x. All other versions are not affected.

Affected products

VendorProductAffectedFixed
Bosch CPP Firmware 7.70, 7.72, 7.62, 7.75, 7.76 —

References