Buffer Overflow vulnerability in the recovery image web-based interface
CVE-2021-23851

6.8MEDIUM

Key Information:

Vendor

Bosch
Status
Cpp Firmware
Vendor
CVE Published:
30 March 2022

What is CVE-2021-23851?

A specially crafted TCP/IP packet may cause the camera recovery image web interface to crash. It may also cause a buffer overflow which could enable remote code execution. The recovery image can only be booted with administrative rights or with physical access to the camera and allows the upload of a new firmware in case of a damaged firmware.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

CPP Firmware CPP4, CPP6, CPP7, CPP7.3 all

References

https://psirt.bosch.com/security-advisories/bosch-sa-4782...
x_refsource_CONFIRM

CVSS V3.1

Score:
6.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.