Denial of Service (DoS) due to invalid web parameter
CVE-2021-23852

4.9MEDIUM

Key Information:

Vendor

Bosch
Status
Cpp Firmware
Vendor
CVE Published:
9 June 2021

What is CVE-2021-23852?

An authenticated attacker with administrator rights Bosch IP cameras can call an URL with an invalid parameter that causes the camera to become unresponsive for a few seconds and cause a Denial of Service (DoS).

Affected Version(s)

CPP Firmware CPP4, CPP6, CPP7, CPP7.3, CPP13 all

References

https://psirt.bosch.com/security-advisories/bosch-sa-4782...
x_refsource_CONFIRM

CVSS V3.1

Score:
4.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.