883 matches found
Bosch IP cameras 跨站脚本漏洞
Bosch IP cameras is a German webcam device.A cross-site scripting vulnerability exists in Bosch IP cameras URL handling, which could be exploited by attackers to inject malicious script or HTML code that could capture sensitive information or hijack user sessions when malicious data is viewed...
Bosch IP cameras 资源管理错误漏洞
Bosch IP cameras is a German Bosch network camera. Bosch IP cameras has a denial of service vulnerability, which stems from the failure to filter invalid parameters in URLs entered by users with administrator privileges, and can be exploited by attackers to cause the camera to become unresponsive...
PT-2021-3730
Name of the Vulnerable Software and Affected Versions Bosch IP cameras versions 7.70 through 7.80 prior to B128 Description A Missing Authentication in Critical Function in Bosch IP cameras allows an unauthenticated remote attacker to extract sensitive information or change settings of the camera...
Bosch IP cameras 访问控制错误漏洞
Bosch IP cameras are German Bosch network cameras A security vulnerability in Bosch IP cameras, which stems from a lack of authentication in a critical function of the cameras, allows an unauthenticated remote attacker to extract sensitive information or change camera settings by sending a crafte...
PT-2021-15563
Name of the Vulnerable Software and Affected Versions: Bosch IP cameras affected versions not specified Description: The issue is related to an error in the URL handler of the web-based interface, which may lead to a reflected cross-site scripting XSS attack. An attacker with knowledge of the...
CVE-2021-23847: Improper Authentication
A Missing Authentication in Critical Function in Bosch IP cameras allows an unauthenticated remote attacker to extract sensitive information or change settings of the camera by sending crafted requests to the device. Only devices of the CPP6, CPP7 and CPP7.3 family with firmware 7.70, 7.72, and...
CVE-2021-23854: Improper Neutralization of Input During Web Page Generation
An error in the handling of a page parameter in Bosch IP cameras may lead to a reflected cross site scripting XSS in the web-based interface. This issue only affects versions 7.7x and 7.6x. All other versions are not affected...
CVE-2021-23853: Improper Input Validation
In Bosch IP cameras, improper validation of the HTTP header allows an attacker to inject arbitrary HTTP headers through crafted URLs...
CVE-2021-23848: Improper Neutralization of Input During Web Page Generation
An error in the URL handler Bosch IP cameras may lead to a reflected cross site scripting XSS in the web-based interface. An attacker with knowledge of the camera address can send a crafted link to a user, which will execute javascript code in the context of the user...
CVE-2021-23852: Uncontrolled Resource Consumption
An authenticated attacker with administrator rights Bosch IP cameras can call an URL with an invalid parameter that causes the camera to become unresponsive for a few seconds and cause a Denial of Service DoS...
PT-2021-15567
Name of the Vulnerable Software and Affected Versions: Bosch IP cameras versions 7.6x through 7.7x Description: An error in the handling of a page parameter in the web-based interface may lead to a reflected cross site scripting XSS issue. Recommendations: For versions 7.6x and 7.7x, update to a...
PT-2021-15566
Name of the Vulnerable Software and Affected Versions: Bosch IP cameras affected versions not specified Description: The issue is related to improper validation of the HTTP header in Bosch IP cameras, which allows an attacker to inject arbitrary HTTP headers through crafted URLs. Recommendations:...
Bosch IP cameras 输入验证错误漏洞
Bosch IP cameras is a German Bosch web camera. Bosch IP cameras is vulnerable to an input validation error that could be exploited by an attacker to inject arbitrary HTTP request headers via a crafted URL...
Bosch B426 Web Configuration Use of Hard-coded Password Authentication Bypass Vulnerability
This vulnerability allows remote attackers to bypass authentication on affected installations of Bosch B426. Authentication is not required to exploit this vulnerability. The specific flaw exists within the lgs.cgi module. This issue results from the use of hard-coded session token. An attacker c...
Bosch多个产品访问控制错误漏洞
Bosch B426 and others are a firmware from Bosch Germany. An access control error vulnerability exists in multiple Bosch products that stems from the use of hard-coded session tokens in the lgs.cgi module. The vulnerability allows remote attackers to bypass the authentication of the affected Bosch...
PT-2021-15561
Name of the Vulnerable Software and Affected Versions: Bosch B426 versions prior to 3.08 Description: This issue allows an attacker to hijack a session while a user is logged in to the configuration web page. It was discovered by a security researcher and found during internal product tests in...
PT-2021-15562
Name of the Vulnerable Software and Affected Versions: Bosch B426 versions prior to 3.11.5 Description: The issue allows an attacker to obtain user passwords through a Man-In-The-Middle MITM attack when using the http protocol, as passwords are transmitted as clear text parameters. Recommendation...
Bosch B426 Web Configuration Credential Information Disclosure Vulnerability
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Bosch B426. User interaction is required to exploit this vulnerability. The specific flaw exists within the handling of login credentials provided to the login.cgi endpoint. The iss...
Bosch B426 安全漏洞
Bosch B426 is a firmware from Bosch Germany. A security vulnerability exists in Bosch B426 that allows network-adjacent attackers to disclose sensitive information about an affected Bosch B426 installation...
