CVE-2018-20299

2022-10-0316:22:04

mitre

www.cve.org

bosch smart home

buffer overflow

web server

unauthorized execution

9.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.1%

JSON

An issue was discovered in several Bosch Smart Home cameras (360 degree indoor camera and Eyes outdoor camera) with firmware before 6.52.4. A malicious client could potentially succeed in the unauthorized execution of code on the device via the network interface, because there is a buffer overflow in the RCP+ parser of the web server.

References

psirt.bosch.com/Advisory/BOSCH-2018-1203.html