Vulnerability · Published Jun 9, 2021 · Assigned by bosch
CVE-2021-23852Denial of Service (DoS) due to invalid web parameter
Medium 4.9
In plain English
A medium-severity uncontrolled resource consumption in CPP Firmware from Bosch. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities).
Severity (CVSS 3.1)4.9Medium
Exploit odds (30 days)0.8%top 42.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
An authenticated attacker with administrator rights Bosch IP cameras can call an URL with an invalid parameter that causes the camera to become unresponsive for a few seconds and cause a Denial of Service (DoS).
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Bosch | CPP Firmware | all |
Weakness: CWE-400 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
References
- https://psirt.bosch.com/security-advisories/bosch-sa-478243-bt.html x_refsource_CONFIRM