CVE-2019-7728

The CVE-2019-7728 entry concerns the Bosch Smart Camera App for Android (before version 1.3.1). The root cause is improperly implemented TLS certificate checks, enabling the possibility of a man-in-the-middle attack on certain connections. Impact is described as partial confidentiality, integrity...

CVE-2019-7729

The CVE affects the Bosch Smart Camera App for Android prior to version 1.3.1. It arises from insecure permission settings, enabling a local attacker to retrieve video clips or still images cached for clip sharing. Impact is limited to confidentiality (partial), with no egregious integrity/availa...

CVE-2019-7728: Improper Certificate Validation

An issue was discovered in the Bosch Smart Camera App before 1.3.1 for Android. Due to improperly implemented TLS certificate checks, a malicious actor could potentially succeed in executing a man-in-the-middle attack for some connections. The Bosch Smart Home App is not affected. iOS Apps are no...

PT-2019-18726

Name of the Vulnerable Software and Affected Versions Bosch Smart Camera App versions prior to 1.3.1 Description The issue is related to improperly implemented TLS certificate checks, which could allow a malicious actor to execute a man-in-the-middle attack for some connections. Recommendations F...

PT-2019-18727

Name of the Vulnerable Software and Affected Versions Bosch Smart Camera App versions prior to 1.3.1 Description An issue was discovered due to the setting of insecure permissions, allowing a malicious app to potentially retrieve video clips or still images that have been cached for clip sharing...

CVE-2019-7729: Incorrect Permission Assignment for Critical Resource

An issue was discovered in the Bosch Smart Camera App before 1.3.1 for Android. Due to setting of insecure permissions, a malicious app could potentially succeed in retrieving video clips or still images that have been cached for clip sharing. The Bosch Smart Home App is not affected. iOS Apps ar...

CVE-2018-20299

An issue was discovered in several Bosch Smart Home cameras 360 degree indoor camera and Eyes outdoor camera with firmware before 6.52.4. A malicious client could potentially succeed in the unauthorized execution of code on the device via the network interface, because there is a buffer overflow ...

Buffer overflow

An issue was discovered in several Bosch Smart Home cameras 360 degree indoor camera and Eyes outdoor camera with firmware before 6.52.4. A malicious client could potentially succeed in the unauthorized execution of code on the device via the network interface, because there is a buffer overflow ...

CVE-2018-20299

An issue was discovered in several Bosch Smart Home cameras 360 degree indoor camera and Eyes outdoor camera with firmware before 6.52.4. A malicious client could potentially succeed in the unauthorized execution of code on the device via the network interface, because there is a buffer overflow ...

CVE-2018-20299

An issue was discovered in several Bosch Smart Home cameras 360 degree indoor camera and Eyes outdoor camera with firmware before 6.52.4. A malicious client could potentially succeed in the unauthorized execution of code on the device via the network interface, because there is a buffer overflow ...

CVE-2018-20299

The CVE affects Bosch Smart Home cameras (360° indoor and Eyes outdoor) with firmware prior to 6.52.4. A buffer overflow in the web server’s RCP+ parser allows a remote attacker over the network to potentially achieve unauthorized code execution on the device. The vulnerability has a network atta...

Bosch IP Camera Buffer Overflow Vulnerability

Bosch IP Camera is a network camera product from Bosch Sicherheissysteme, Germany. A buffer overflow vulnerability exists in the web server in Bosch IP Camera using firmware version 6.32 and later. A remote attacker can exploit this vulnerability to unauthorized code execution on the device via a...

PT-2018-15299

Name of the Vulnerable Software and Affected Versions Bosch Smart Home cameras 360 degree indoor camera and Eyes outdoor camera versions prior to 6.52.4 Description An issue was discovered in the RCP+ parser of the web server, which could allow a malicious client to execute code on the device via...

CVE-2018-20299: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in several Bosch Smart Home cameras 360 degree indoor camera and Eyes outdoor camera with firmware before 6.52.4. A malicious client could potentially succeed in the unauthorized execution of code on the device via the network interface, because there is a buffer overflow ...

Input validation

An issue was discovered in several Bosch IP cameras for firmware versions 6.32 and higher. A malicious client could potentially succeed in the unauthorized execution of code on the device via the network interface...

CVE-2018-19036

An issue was discovered in several Bosch IP cameras for firmware versions 6.32 and higher. A malicious client could potentially succeed in the unauthorized execution of code on the device via the network interface...

CVE-2018-19036

An issue was discovered in several Bosch IP cameras for firmware versions 6.32 and higher. A malicious client could potentially succeed in the unauthorized execution of code on the device via the network interface...

CVE-2018-19036

An issue was discovered in several Bosch IP cameras for firmware versions 6.32 and higher. A malicious client could potentially succeed in the unauthorized execution of code on the device via the network interface...

CVE-2018-19036

Bosch IP Cameras (firmware 6.32 and higher) are affected by CVE-2018-19036 due to a buffer overflow in the web server. This could enable remote code execution by a malicious client over the network interface. The CNVD entry and NVD listing corroborate remote arbitrary code execution with high/sev...

PT-2018-14763

Name of the Vulnerable Software and Affected Versions Bosch IP cameras versions 6.32 and higher Description An issue was discovered that could allow a malicious client to execute code on the device via the network interface. Recommendations For versions 6.32 and higher, at the moment, there is no...