Bosch Common Product Platform 13 Firmware 7.75
Approved changes feed: RSS · Atom
cpe:2.3:o:bosch:cpp13_firmware:7.75:*:*:*:*:*:*:*
part: o version: 7.75 update: *
| Vendor | Bosch (fd8ddba2-7d59-56e9-89d8-6fcadc94214e) |
|---|---|
| Product | Cpp13 Firmware (a3544758-bce1-50ed-8f89-dec1d87de38c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-23854 |
vulnerable | 2026-06-08 05:30:03.281053 |
Reflected XSS in page parameter
HIGH (8.3)
An error in the handling of a page parameter in Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interface. This issue only affects versions 7.7x and 7.6x. All other versions are not affected.
Published: 2021-06-09T14:20:14.134Z
Updated: 2024-09-16T17:32:50.243Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23849 |
vulnerable | 2026-06-08 05:30:03.177663 |
Cross Site Request Forgery (CSRF) vulnerability in web based management interface
HIGH (7.5)
A vulnerability in the web-based interface allows an unauthenticated remote attacker to trigger actions on an affected system on behalf of another user (CSRF - Cross Site Request Forgery). This requires the victim to be tricked into clicking a malicious link or opening a malicious website while being logged in into the camera.
Published: 2021-08-05T19:23:32.655Z
Updated: 2024-09-16T17:23:27.843Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.