Bosch Common Product Platform 7.3 Firmware 7.72
Approved changes feed: RSS · Atom
cpe:2.3:o:bosch:cpp7.3_firmware:7.72:*:*:*:*:*:*:*
part: o version: 7.72 update: *
| Vendor | Bosch (fd8ddba2-7d59-56e9-89d8-6fcadc94214e) |
|---|---|
| Product | Cpp7.3 Firmware (784e24fc-ba1c-52e0-b8bf-df84202ec189) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-23854 |
vulnerable | 2026-06-08 05:30:03.281018 |
Reflected XSS in page parameter
HIGH (8.3)
An error in the handling of a page parameter in Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interface. This issue only affects versions 7.7x and 7.6x. All other versions are not affected.
Published: 2021-06-09T14:20:14.134Z
Updated: 2024-09-16T17:32:50.243Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23849 |
vulnerable | 2026-06-08 05:30:03.175271 |
Cross Site Request Forgery (CSRF) vulnerability in web based management interface
HIGH (7.5)
A vulnerability in the web-based interface allows an unauthenticated remote attacker to trigger actions on an affected system on behalf of another user (CSRF - Cross Site Request Forgery). This requires the victim to be tricked into clicking a malicious link or opening a malicious website while being logged in into the camera.
Published: 2021-08-05T19:23:32.655Z
Updated: 2024-09-16T17:23:27.843Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23847 |
vulnerable | 2026-06-08 05:30:03.157796 |
Unauthenticated Information Extraction Vulnerability
CRITICAL (9.8)
A Missing Authentication in Critical Function in Bosch IP cameras allows an unauthenticated remote attacker to extract sensitive information or change settings of the camera by sending crafted requests to the device. Only devices of the CPP6, CPP7 and CPP7.3 family with firmware 7.70, 7.72, and 7.80 prior to B128 are affected by this vulnerability. Versions 7.62 or lower and INTEOX cameras are not affected.
Published: 2021-06-09T14:19:47.260Z
Updated: 2024-09-17T02:46:39.127Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.