Description
A SQL Injection issue in the request body processing in BOS IPCs with firmware 21.45.8.2.2_220219 before 21.45.8.2.3_230220 allows remote attackers to obtain sensitive information from the database via crafted input in the request body.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BOS | IP camera | 21.45.8.2.2_220219 – < 21.45.8.2.3_230220 | 21.45.8.2.3_230220 |