CVE-2024-58330

A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytics event data...

CVE-2024-58330

A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytics event data...

EUVD-2024-55694

A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytics event data...

CVE-2024-58330

A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytics event data...

CVE-2024-58330

CVE-2024-58330 affects Bosch IP cameras families CPP13 and CPP14 due to a missing authentication check in the access path that guards video analytics event data. The vulnerability enables an unauthenticated attacker to retrieve video analytics event data remotely over the network, with a CVSS v3....

CVE-2024-58023

Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to access sensitive information...

CVE-2024-58023

Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to access sensitive information...

CVE-2024-58023

Technical details are not publicly available in the provided documents. Monitor Bosch security advisories for updates on CVE-2024-58023.

EUVD-2024-55695

Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to access sensitive information...

CVE-2024-58023

Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to access sensitive information...

PT-2026-63583

Name of the Vulnerable Software and Affected Versions Bosch IP cameras families CPP13 and CPP14 affected versions not specified Description A missing authentication check allows an unauthenticated attacker to retrieve video analytics event data. Recommendations At the moment, there is no...

CVE-2024-58330: Improper Access Control

A missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an unauthenticated attacker to retrieve video analytics event data...

CVE-2024-58023: Cleartext Storage of Sensitive Information

Information disclosure in Bosch Configuration Manager in Version 7.72.0106 allows an attacker to access sensitive information...

PT-2026-63582

Name of the Vulnerable Software and Affected Versions Bosch Configuration Manager version 7.72.0106 Description An information disclosure issue exists that allows an attacker to access sensitive information. Recommendations At the moment, there is no information about a newer version that contain...

Bosch Security Systems IP Cameras NXP Chip Side-Channel Key Extraction (CVE-2021-3011)

Several Bosch IP cameras are built on a hardware platform that uses an NXP SmartMX/P5x secure element affected by an electromagnetic-wave side-channel vulnerability. An attacker with extended physical access to the device could recover the ECDSA private key and clone the device. The issue resides...

Bosch Security Systems IP Cameras Remote Code Execution (CVE-2018-19036)

An issue was discovered in several Bosch IP cameras running firmware 6.32 and higher. A malicious client could potentially succeed in the unauthorized execution of code on the device via the network interface. This plugin only works with Tenable.ot. Please visit...

Bosch Security Systems IP Cameras Uncontrolled Resource Consumption (CVE-2023-32229)

Due to an error in the software interface to the secure element chip on Bosch IP cameras of family CPP13 and CPP14, the chip can be permanently damaged when enabling the Stream security option signing of the video stream with option MD5, SHA-1 or SHA-256. This plugin only works with Tenable.ot...

Bosch Security Systems IP Cameras Reflected Cross-site Scripting (CVE-2021-23854)

An error in the handling of a page parameter in Bosch IP cameras may lead to a reflected cross site scripting XSS in the web-based interface. This issue only affects versions 7.7x and 7.6x. All other versions are not affected. This plugin only works with Tenable.ot. Please visit...

Bosch Security Systems IP Cameras Improper Authentication (CVE-2021-23847)

A Missing Authentication in Critical Function in Bosch IP cameras allows an unauthenticated remote attacker to extract sensitive information or change settings of the camera by sending crafted requests to the device. Only devices of the CPP6, CPP7 and CPP7.3 family with firmware 7.70, 7.72, and...

Bosch Security Systems IP Cameras Improper Access Control (CVE-2022-41677)

An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information like capabilities about the device itself and network settings of the device, disclosing possibly internal network settings if the device is connected to...