Cpp Firmware
Approved changes feed: RSS · Atom
cpe:2.3:a:bosch:cpp_firmware:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Bosch (fd8ddba2-7d59-56e9-89d8-6fcadc94214e) |
|---|---|
| Product | Cpp Firmware (204b5960-b5e1-5dcd-bd65-93f784833007) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-23854 |
vulnerable | 2026-06-08 05:30:03.265396 |
Reflected XSS in page parameter
HIGH (8.3)
An error in the handling of a page parameter in Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interface. This issue only affects versions 7.7x and 7.6x. All other versions are not affected.
Published: 2021-06-09T14:20:14.134Z
Updated: 2024-09-16T17:32:50.243Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23853 |
vulnerable | 2026-06-08 05:30:03.264600 |
Improper Input Validation of HTTP Headers
HIGH (8.3)
In Bosch IP cameras, improper validation of the HTTP header allows an attacker to inject arbitrary HTTP headers through crafted URLs.
Published: 2021-06-09T14:19:24.674Z
Updated: 2024-09-17T00:25:32.494Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23852 |
vulnerable | 2026-06-08 05:30:03.263999 |
Denial of Service (DoS) due to invalid web parameter
MEDIUM (4.9)
An authenticated attacker with administrator rights Bosch IP cameras can call an URL with an invalid parameter that causes the camera to become unresponsive for a few seconds and cause a Denial of Service (DoS).
Published: 2021-06-09T14:18:24.707Z
Updated: 2024-09-16T22:03:24.110Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23851 |
vulnerable | 2026-06-08 05:30:03.260622 |
Buffer Overflow vulnerability in the recovery image web-based interface
MEDIUM (6.8)
A specially crafted TCP/IP packet may cause the camera recovery image web interface to crash. It may also cause a buffer overflow which could enable remote code execution. The recovery image can only be booted with administrative rights or with physical access to the camera and allows the upload of a new firmware in case of a damaged firmware.
Published: 2022-03-30T16:03:04.883Z
Updated: 2024-09-16T18:39:12.509Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23850 |
vulnerable | 2026-06-08 05:30:03.180670 |
Buffer Overflow vulnerability in the recovery image telnet server
MEDIUM (6.8)
A specially crafted TCP/IP packet may cause a camera recovery image telnet interface to crash. It may also cause a buffer overflow which could enable remote code execution. The recovery image can only be booted with administrative rights or with physical access to the camera and allows the upload of a new firmware in case of a damaged firmware.
Published: 2022-03-30T16:03:03.708Z
Updated: 2024-09-17T02:57:11.806Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23849 |
vulnerable | 2026-06-08 05:30:03.164977 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23848 |
vulnerable | 2026-06-08 05:30:03.158753 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23847 |
vulnerable | 2026-06-08 05:30:03.151592 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.