Bosch Security Systems IP Cameras Improper Authentication (CVE-2021-23847)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(505363);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/06/18");

  script_cve_id("CVE-2021-23847");

  script_name(english:"Bosch Security Systems IP Cameras Improper Authentication (CVE-2021-23847)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"A Missing Authentication in Critical Function in Bosch IP cameras
allows an unauthenticated remote attacker to extract sensitive
information or change settings of the camera by sending crafted
requests to the device. Only devices of the CPP6, CPP7 and CPP7.3
family with firmware 7.70, 7.72, and 7.80 prior to B128 are affected
by this vulnerability. Versions 7.62 or lower and INTEOX cameras are
not affected.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  script_set_attribute(attribute:"see_also", value:"https://psirt.bosch.com/security-advisories/bosch-sa-478243-bt.html");
  script_set_attribute(attribute:"solution", value:
"Refer to the vendor advisory.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2021-23847");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_cwe_id(287, 306);

  script_set_attribute(attribute:"vuln_publication_date", value:"2021/06/09");
  script_set_attribute(attribute:"patch_publication_date", value:"2021/06/09");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/06/17");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:bosch:cpp6_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:bosch:cpp6_firmware:7.70");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:bosch:cpp6_firmware:7.72");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:bosch:cpp7.3_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:bosch:cpp7.3_firmware:7.70");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:bosch:cpp7.3_firmware:7.72");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:bosch:cpp7_firmware");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:bosch:cpp7_firmware:7.70");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:bosch:cpp7_firmware:7.72");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/BoschSecuritySystems");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/BoschSecuritySystems');

var asset = tenable_ot::assets::get(vendor:'BoschSecuritySystems');

var vuln_cpes = {
    "cpe:/o:bosch:cpp6_firmware" :
        {"versionEndExcluding" : "7.80.0129", "versionStartIncluding" : "7.80", "family" : "BoschCamera"},
    "cpe:/o:bosch:cpp6_firmware:7.70" :
        {"versionEndIncluding" : "7.70", "versionStartIncluding" : "7.70", "family" : "BoschCamera"},
    "cpe:/o:bosch:cpp6_firmware:7.72" :
        {"versionEndIncluding" : "7.72", "versionStartIncluding" : "7.72", "family" : "BoschCamera"},
    "cpe:/o:bosch:cpp7_firmware" :
        {"versionEndExcluding" : "7.80.0129", "versionStartIncluding" : "7.80", "family" : "BoschCamera"},
    "cpe:/o:bosch:cpp7_firmware:7.70" :
        {"versionEndIncluding" : "7.70", "versionStartIncluding" : "7.70", "family" : "BoschCamera"},
    "cpe:/o:bosch:cpp7_firmware:7.72" :
        {"versionEndIncluding" : "7.72", "versionStartIncluding" : "7.72", "family" : "BoschCamera"},
    "cpe:/o:bosch:cpp7.3_firmware" :
        {"versionEndExcluding" : "7.80.0129", "versionStartIncluding" : "7.80", "family" : "BoschCamera"},
    "cpe:/o:bosch:cpp7.3_firmware:7.70" :
        {"versionEndIncluding" : "7.70", "versionStartIncluding" : "7.70", "family" : "BoschCamera"},
    "cpe:/o:bosch:cpp7.3_firmware:7.72" :
        {"versionEndIncluding" : "7.72", "versionStartIncluding" : "7.72", "family" : "BoschCamera"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_WARNING);