Approved changes feed: RSS · Atom

cpe:2.3:o:bosch:cpp13_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorBosch (fd8ddba2-7d59-56e9-89d8-6fcadc94214e)
ProductCpp13 Firmware (a3544758-bce1-50ed-8f89-dec1d87de38c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-23853 vulnerable 2026-06-08 05:30:03.264933 Improper Input Validation of HTTP Headers
HIGH (8.3)
In Bosch IP cameras, improper validation of the HTTP header allows an attacker to inject arbitrary HTTP headers through crafted URLs.
Published: 2021-06-09T14:19:24.674Z
Updated: 2024-09-17T00:25:32.494Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-23852 vulnerable 2026-06-08 05:30:03.264195 Denial of Service (DoS) due to invalid web parameter
MEDIUM (4.9)
An authenticated attacker with administrator rights Bosch IP cameras can call an URL with an invalid parameter that causes the camera to become unresponsive for a few seconds and cause a Denial of Service (DoS).
Published: 2021-06-09T14:18:24.707Z
Updated: 2024-09-16T22:03:24.110Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-23848 vulnerable 2026-06-08 05:30:03.163854 Reflected XSS in URL handler
HIGH (8.3)
An error in the URL handler Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interface. An attacker with knowledge of the camera address can send a crafted link to a user, which will execute javascript code in the context of the user.
Published: 2021-06-09T14:18:46.544Z
Updated: 2024-09-16T16:27:51.671Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.