Lucene search

[email protected]NVD:CVE-2023-32229

HistoryJun 15, 2023 - 11:15 a.m.

CVE-2023-32229

2023-06-1511:15:09

CWE-400

CWE-1246

[email protected]

web.nvd.nist.gov

bosch ip cameras

secure element interface

chip damage

stream security

md5

sha-1

sha-256

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.7%

JSON

Due to an error in the software interface to the secure element chip on Bosch IP cameras of family CPP13 and CPP14, the chip can be permanently damaged when enabling the Stream security option (signing of the video stream) with option MD5, SHA-1 or SHA-256.

Affected configurations

NVD

Node

boschcpp13_firmwareRange<8.48.0017

AND

boschautodome_7000iMatch-

boschautodome_7100_irMatch-

boschautodome_inteox_7000iMatch-

boschdinion_inteox_7100i_irMatch-

boschflexidome_inteox_7100i_irMatch-

boschmic_inteox_7100iMatch-

Node

boschcpp14_firmwareRange8.50–8.80.0090

AND

boschdinion_7100i_irMatch-

boschflexidome_indoor_5100iMatch-

boschflexidome_indoor_5100i_irMatch-

boschflexidome_multi_7000iMatch-

boschflexidome_multi_7000i_irMatch-

boschflexidome_outdoor_5100iMatch-

boschflexidome_outdoor_5100i_irMatch-

boschflexidome_panoramic_5100iMatch-

boschflexidome_panoramic_5100i_irMatch-

References

psirt.bosch.com/security-advisories/BOSCH-SA-435698-BT.html

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.7%

JSON

Related for NVD:CVE-2023-32229

cve1 prion1 cvelist1