Command injection

2023-12-1813:15:00

PRIOn knowledge base

www.prio-n.com

command injection

bosch

ip cameras

vulnerability

administrative rights

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

A command injection vulnerability exists in Bosch IP cameras that allows an authenticated user with administrative rights to run arbitrary commands on the OS of the camera.

CPENameOperatorVersion
cpp13_firmwarele8.90
cpp14_firmwarege8.20
cpp14_firmwarele8.81

Name	Operator	Version
cpp13_firmware	le	8.90
cpp14_firmware	ge	8.20
cpp14_firmware	le	8.81

References

psirt.bosch.com/security-advisories/BOSCH-SA-638184-BT.html