Vulnerability · Published Jun 9, 2021 · Assigned by bosch
CVE-2021-23853Improper Input Validation of HTTP Headers
High 8.3
In plain English
A high-severity improper input validation in CPP Firmware from Bosch. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities).
Severity (CVSS 3.1)8.3High
Exploit odds (30 days)0.9%top 41.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
In Bosch IP cameras, improper validation of the HTTP header allows an attacker to inject arbitrary HTTP headers through crafted URLs.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Bosch | CPP Firmware | all |
Weakness: CWE-20 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
References
- https://psirt.bosch.com/security-advisories/bosch-sa-478243-bt.html x_refsource_CONFIRM