CVE-2022-41677
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
Percentile
20.5%
An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information (like capabilities) about the device itself and network settings of the device, disclosing possibly internal network settings if the device is connected to the internet.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| bosch | cpp14 | - | cpe:2.3:h:bosch:cpp14:-:*:*:*:*:*:*:* |
| bosch | cpp14_firmware | * | cpe:2.3:o:bosch:cpp14_firmware:*:*:*:*:*:*:*:* |
| bosch | cpp13 | - | cpe:2.3:h:bosch:cpp13:-:*:*:*:*:*:*:* |
| bosch | cpp13_firmware | * | cpe:2.3:o:bosch:cpp13_firmware:*:*:*:*:*:*:*:* |
| bosch | cpp7.3 | - | cpe:2.3:h:bosch:cpp7.3:-:*:*:*:*:*:*:* |
| bosch | cpp7.3_firmware | * | cpe:2.3:o:bosch:cpp7.3_firmware:*:*:*:*:*:*:*:* |
| bosch | cpp7 | - | cpe:2.3:h:bosch:cpp7:-:*:*:*:*:*:*:* |
| bosch | cpp7_firmware | * | cpe:2.3:o:bosch:cpp7_firmware:*:*:*:*:*:*:*:* |
| bosch | cpp6 | - | cpe:2.3:h:bosch:cpp6:-:*:*:*:*:*:*:* |
| bosch | cpp6_firmware | * | cpe:2.3:o:bosch:cpp6_firmware:*:*:*:*:*:*:*:* |
Related
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
Percentile
20.5%