Vulnerability · Published Dec 18, 2023 · Assigned by bosch
CVE-2022-41677
Medium 5.3
In plain English
A medium-severity improper access control in Camera Firmware from Bosch. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 49% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.6%top 51.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information (like capabilities) about the device itself and network settings of the device, disclosing possibly internal network settings if the device is connected to the internet.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Bosch | Camera Firmware | 0 – through 8.80 |
| Bosch | Camera Firmware | 0 – through 8.48 |
| Bosch | Camera Firmware | 0 – through 7.86 |
| Bosch | Camera Firmware | 0 – through 7.86 |
| Bosch | Camera Firmware | 0 – through 7.86 |
| Bosch | Camera Firmware | 0 – through 7.10 |
Weakness: CWE-284 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N