CVE-2021-23850

🗓️ 30 Mar 2022 16:03:03Reported by boschType

A TCP/IP packet can crash camera telnet interface and enable remote code execution

Reporter	Title	Published	Views	Family All 7
CNNVD	Bosch IP cameras 安全漏洞	30 Mar 202200:00	–	cnnvd
Cvelist	CVE-2021-23850 Buffer Overflow vulnerability in the recovery image telnet server	30 Mar 202216:03	–	cvelist
EUVD	EUVD-2021-10776	7 Oct 202500:30	–	euvd
NVD	CVE-2021-23850	30 Mar 202216:15	–	nvd
OSV	CVE-2021-23850	30 Mar 202216:15	–	osv
Prion	Buffer overflow	30 Mar 202216:15	–	prion
Tenable Nessus	Bosch Security Systems Multiple Products Stack-based Buffer Overflow (CVE-2021-23850)	6 Feb 202400:00	–	nessus

NVD

Node

bosch autodome_ip_4000i_firmwareMatchcpp7.3

AND

bosch autodome_ip_4000iMatch-

Node

bosch autodome_ip_5000i_firmwareMatchcpp7.3

AND

bosch autodome_ip_5000iMatch-

Node

bosch autodome_ip_starlight_5000i_firmwareMatchcpp7.3

AND

bosch autodome_ip_starlight_5000iMatch-

Node

bosch autodome_ip_starlight_7000i_firmwareMatchcpp7.3

AND

bosch autodome_ip_starlight_7000iMatch-

Node

bosch dinion_ip_3000i_firmwareMatchcpp7.3

AND

bosch dinion_ip_3000iMatch-

Node

bosch dinion_ip_bullet_4000i_firmwareMatchcpp7.3

AND

bosch dinion_ip_bullet_4000iMatch-

Node

bosch dinion_ip_bullet_5000_firmwareMatchcpp7.3

AND

bosch dinion_ip_bullet_5000Match-

Node

bosch dinion_ip_bullet_5000i_firmwareMatchcpp7.3

AND

bosch dinion_ip_bullet_5000iMatch-

Node

bosch dinion_ip_bullet_6000i_firmwareMatchcpp7.3

AND

bosch dinion_ip_bullet_6000iMatch-

Node

bosch flexidome_ip_3000i_firmwareMatchcpp7.3

AND

bosch flexidome_ip_3000iMatch-

Node

bosch flexidome_ip_4000i_firmwareMatchcpp7.3

AND

bosch flexidome_ip_4000iMatch-

Node

bosch flexidome_ip_5000i_firmwareMatchcpp7.3

AND

bosch flexidome_ip_5000iMatch-

Node

bosch flexidome_ip_starlight_5000i_firmwareMatchcpp7.3

AND

bosch flexidome_ip_starlight_5000iMatch-

Node

bosch flexidome_ip_starlight_8000i_firmwareMatchcpp7.3

AND

bosch flexidome_ip_starlight_8000iMatch-

Node

bosch mic_ip_starlight_7000i_firmwareMatchcpp7.3

AND

bosch mic_ip_starlight_7000iMatch-

Node

bosch mic_ip_starlight_7100i_firmwareMatchcpp7.3

AND

bosch mic_ip_starlight_7100iMatch-

Node

bosch mic_ip_ultra_7100i_firmwareMatchcpp7.3

AND

bosch mic_ip_ultra_7100iMatch-

Node

bosch mic_ip_fusion_9000i_firmwareMatchcpp7.3

AND

bosch mic_ip_fusion_9000iMatch-

Node

bosch dinion_ip_starlight_6000_firmwareMatchcpp7

AND

bosch dinion_ip_starlight_6000Match-

Node

bosch dinion_ip_starlight_7000_firmwareMatchcpp7

AND

bosch dinion_ip_starlight_7000Match-

Node

bosch dinion_ip_thermal_8000_firmwareMatchcpp7

AND

bosch dinion_ip_thermal_8000Match-

Node

bosch flexidome_ip_starlight_6000_firmwareMatchcpp7

AND

bosch flexidome_ip_starlight_6000Match-

Node

bosch flexidome_ip_starlight_7000_firmwareMatchcpp7

AND

bosch flexidome_ip_starlight_7000Match-

Node

bosch dinion_ip_thermal_9000_rm_firmwareMatchcpp7

AND

bosch dinion_ip_thermal_9000_rmMatch-

Node

bosch aviotec_ip_starlight_8000_firmwareMatchcpp6

AND

bosch aviotec_ip_starlight_8000Match-

Node

bosch dinion_ip_starlight_8000_firmwareMatchcpp6

AND

bosch dinion_ip_starlight_8000Match-

Node

bosch dinion_ip_ultra_8000_firmwareMatchcpp6

AND

bosch dinion_ip_ultra_8000Match-

Node

bosch flexidome_ip_panoramic_6000_firmwareMatchcpp6

AND

bosch flexidome_ip_panoramic_6000Match-

Node

bosch flexidome_ip_panoramic_7000_firmwareMatchcpp6

AND

bosch flexidome_ip_panoramic_7000Match-

Node

bosch autodome_ip_4000_hd_firmwareMatchcpp4

AND

bosch autodome_ip_4000_hdMatch-

Node

bosch autodome_ip_5000_hd_firmwareMatchcpp4

AND

bosch autodome_ip_5000_hdMatch-

Node

bosch autodome_ip_5000_ir_firmwareMatchcpp4

AND

bosch autodome_ip_5000_irMatch-

Node

bosch autodome_7000_firmwareMatchcpp4

AND

bosch autodome_7000Match-

Node

bosch dinion_hd_1080p_firmwareMatchcpp4

AND

bosch dinion_hd_1080pMatch-

Node

bosch dinion_hd_1080p_hdr_firmwareMatchcpp4

AND

bosch dinion_hd_1080p_hdrMatch-

Node

bosch dinion_hd_720p_firmwareMatchcpp4

AND

bosch dinion_hd_720pMatch-

Node

bosch dinion_imager_9000_hd_firmwareMatchcpp4

AND

bosch dinion_imager_9000_hdMatch-

Node

bosch dinion_ip_bullet_4000_firmwareMatchcpp4

AND

bosch dinion_ip_bullet_4000Match-

Node

bosch dinion_ip_bullet_5000_firmwareMatchcpp4

AND

bosch dinion_ip_bullet_5000Match-

Node

bosch dinion_ip_4000_hd_firmwareMatchcpp4

AND

bosch dinion_ip_4000_hdMatch-

Node

bosch dinion_ip_5000_hd_firmwareMatchcpp4

AND

bosch dinion_ip_5000_hdMatch-

Node

bosch dinion_ip_5000_mp_firmwareMatchcpp4

AND

bosch dinion_ip_5000_mpMatch-

Node

bosch dinion_ip_starlight_7000_hd_firmwareMatchcpp4

AND

bosch dinion_ip_starlight_7000_hdMatch-

Node

bosch flexidome_corner_9000_mp_firmwareMatchcpp4

AND

bosch flexidome_corner_9000_mpMatch-

Node

bosch flexidome_hd_1080p_firmwareMatchcpp4

AND

bosch flexidome_hd_1080pMatch-

Node

bosch flexidome_hd_1080p_hdr_firmwareMatchcpp4

AND

bosch flexidome_hd_1080p_hdrMatch-

Node

bosch flexidome_hd_720p_firmwareMatchcpp4

AND

bosch flexidome_hd_720pMatch-

Node

bosch vandal-proof_flexidome_hd_1080p_firmwareMatchcpp4

AND

bosch vandal-proof_flexidome_hd_1080pMatch-

Node

bosch vandal-proof_flexidome_hd_1080p_hdr_firmwareMatchcpp4

AND

bosch vandal-proof_flexidome_hd_1080p_hdrMatch-

Node

bosch vandal-proof_flexidome_hd_720p_firmwareMatchcpp4

AND

bosch vandal-proof_flexidome_hd_720pMatch-

Node

bosch flexidome_ip_micro_2000_hd_firmwareMatchcpp4

AND

bosch flexidome_ip_micro_2000_hdMatch-

Node

bosch flexidome_ip_micro_2000_ip_firmwareMatchcpp4

AND

bosch flexidome_ip_micro_2000_ipMatch-

Node

bosch flexidome_ip_indoor_4000_hd_firmwareMatchcpp4

AND

bosch flexidome_ip_indoor_4000_hdMatch-

Node

bosch flexidome_ip_indoor_4000_ir_firmwareMatchcpp4

AND

bosch flexidome_ip_indoor_4000_irMatch-

Node

bosch flexidome_ip_outdoor_4000_hd_firmwareMatchcpp4

AND

bosch flexidome_ip_outdoor_4000_hdMatch-

Node

bosch flexidome_ip_outdoor_4000_ir_firmwareMatchcpp4

AND

bosch flexidome_ip_outdoor_4000_irMatch-

Node

bosch flexidome_ip_indoor_5000_hd_firmwareMatchcpp4

AND

bosch flexidome_ip_indoor_5000_hdMatch-

Node

bosch flexidome_ip_indoor_5000_mp_firmwareMatchcpp4

AND

bosch flexidome_ip_indoor_5000_mpMatch-

Node

bosch flexidome_ip_micro_5000_mp_firmwareMatchcpp4

AND

bosch flexidome_ip_micro_5000_mpMatch-

Node

bosch flexidome_ip_outdoor_5000_hd_firmwareMatchcpp4

AND

bosch flexidome_ip_outdoor_5000_hdMatch-

Node

bosch flexidome_ip_outdoor_5000_mp_firmwareMatchcpp4

AND

bosch flexidome_ip_outdoor_5000_mpMatch-

Node

bosch flexidome_ip_panoramic_5000_firmwareMatchcpp4

AND

bosch flexidome_ip_panoramic_5000Match-

Node

bosch ip_bullet_4000_hd_firmwareMatchcpp4

AND

bosch ip_bullet_4000_hdMatch-

Node

bosch ip_bullet_5000_hd_firmwareMatchcpp4

AND

bosch ip_bullet_5000_hdMatch-

Node

bosch ip_micro_2000_firmwareMatchcpp4

AND

bosch ip_micro_2000Match-

Node

bosch ip_micro_2000_hd_firmwareMatchcpp4

AND

bosch ip_micro_2000_hdMatch-

Node

bosch mic_ip_dynamic_7000_firmwareMatchcpp4

AND

bosch mic_ip_dynamic_7000Match-

Node

bosch mic_ip_starlight_7000_firmwareMatchcpp4

AND

bosch mic_ip_starlight_7000Match-

Node

bosch tinyon_ip_2000_firmwareMatchcpp4

AND

bosch tinyon_ip_2000Match-

[
  {
    "platforms": [
      "CPP4, CPP6, CPP7, CPP7.3"
    ],
    "product": "CPP Firmware",
    "vendor": "Bosch",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  }
]

Source	Link
psirt	www.psirt.bosch.com/security-advisories/bosch-sa-478243-bt.html
psirt	www.psirt.bosch.com/security-advisories/bosch-sa-446276-bt.html

21 Nov 2024 05:51Current

7.3High risk

Vulners AI Score7.3

CVSS 26.5

CVSS 3.16.8 - 7.2

EPSS0.00267