GCVE - cpe:2.3:h:bosch:cpp7.3:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:bosch:cpp7.3:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Bosch (`fd8ddba2-7d59-56e9-89d8-6fcadc94214e`)
Product	Cpp7.3 (`01d8d982-5616-57d3-b1c5-fb3ef09b3581`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-41677`	not_vulnerable	2026-06-08 05:48:30.770178	Details available MEDIUM (5.3) An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information (like capabilities) about the device itself and network settings of the device, disclosing possibly internal network settings if the device is connected to the internet. Published: 2023-12-18T13:02:08.943Z Updated: 2024-11-27T20:36:39.862Z Open on db.gcve.eu Reference links https://psirt.bosch.com/security-advisories/bosch-sa-839739-BT.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-23854`	not_vulnerable	2026-06-08 05:30:03.281035	Reflected XSS in page parameter HIGH (8.3) An error in the handling of a page parameter in Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interface. This issue only affects versions 7.7x and 7.6x. All other versions are not affected. Published: 2021-06-09T14:20:14.134Z Updated: 2024-09-16T17:32:50.243Z Open on db.gcve.eu Reference links https://psirt.bosch.com/security-advisories/bosch-sa-478243-bt.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-23853`	not_vulnerable	2026-06-08 05:30:03.264853	Improper Input Validation of HTTP Headers HIGH (8.3) In Bosch IP cameras, improper validation of the HTTP header allows an attacker to inject arbitrary HTTP headers through crafted URLs. Published: 2021-06-09T14:19:24.674Z Updated: 2024-09-17T00:25:32.494Z Open on db.gcve.eu Reference links https://psirt.bosch.com/security-advisories/bosch-sa-478243-bt.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-23852`	not_vulnerable	2026-06-08 05:30:03.264178	Denial of Service (DoS) due to invalid web parameter MEDIUM (4.9) An authenticated attacker with administrator rights Bosch IP cameras can call an URL with an invalid parameter that causes the camera to become unresponsive for a few seconds and cause a Denial of Service (DoS). Published: 2021-06-09T14:18:24.707Z Updated: 2024-09-16T22:03:24.110Z Open on db.gcve.eu Reference links https://psirt.bosch.com/security-advisories/bosch-sa-478243-bt.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-23849`	not_vulnerable	2026-06-08 05:30:03.176725	Cross Site Request Forgery (CSRF) vulnerability in web based management interface HIGH (7.5) A vulnerability in the web-based interface allows an unauthenticated remote attacker to trigger actions on an affected system on behalf of another user (CSRF - Cross Site Request Forgery). This requires the victim to be tricked into clicking a malicious link or opening a malicious website while being logged in into the camera. Published: 2021-08-05T19:23:32.655Z Updated: 2024-09-16T17:23:27.843Z Open on db.gcve.eu Reference links https://psirt.bosch.com/security-advisories/bosch-sa-033305-bt.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-23848`	not_vulnerable	2026-06-08 05:30:03.162989	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-23847`	not_vulnerable	2026-06-08 05:30:03.158262	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.