Information disclosure

An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information like capabilities about the device itself and network settings of the device, disclosing possibly internal network settings if the device is connected to...

Input validation

An improper handling of a malformed API request to an API server in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service DoS situation...

Command injection

A command injection vulnerability exists in Bosch IP cameras that allows an authenticated user with administrative rights to run arbitrary commands on the OS of the camera...

CVE-2022-41677

CVE-2022-41677 affects Bosch IP camera devices. Concrete affected models/versions surfaced in external sources: Bosch CPP14 (firmware ≤ 8.80), CPP13 (≤ 8.48), CPP7.3 (≤ 7.86), and others. The issue is an information-disclosure vulnerability allowing an unauthenticated attacker to retrieve device ...

CVE-2022-41677

An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information like capabilities about the device itself and network settings of the device, disclosing possibly internal network settings if the device is connected to...

CVE-2022-41677

An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information like capabilities about the device itself and network settings of the device, disclosing possibly internal network settings if the device is connected to...

CVE-2023-35867

An improper handling of a malformed API answer packets to API clients in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service DoS situation. To exploit this vulnerability an attacker has to replace an existing API server e.g. through Man-in-the-Middle...

CVE-2023-35867

CVE-2023-35867 affects Bosch BT software products. The vulnerability arises from improper handling of malformed API answer packets in API responses, enabling an unauthenticated attacker to cause a Denial of Service. Exploitation requires replacing an existing API server (e.g., via Man-in-the-Midd...

CVE-2023-32230

An improper handling of a malformed API request to an API server in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service DoS situation...

CVE-2023-32230

CVE-2023-32230 concerns Bosch BT software, where improper handling of a malformed API request against an API server enables an unauthenticated attacker to cause a Denial of Service (DoS) over the network. The vulnerability is described across multiple sources as affecting Bosch BT software produc...

CVE-2023-39509

A command injection vulnerability exists in Bosch IP cameras that allows an authenticated user with administrative rights to run arbitrary commands on the OS of the camera...

CVE-2023-39509

CVE-2023-39509 is a command injection vulnerability affecting Bosch IP cameras. Affected component is the camera OS accessible to an authenticated administrator who can run arbitrary commands. Public details confirm impact on confidentiality, integrity, and availability (score 7.2, HIGH). Concret...

PT-2023-14011 · Bosch · Bosch Ip Cameras

Name of the Vulnerable Software and Affected Versions: Bosch IP camera devices affected versions not specified Description: An information disclosure issue was found in Bosch IP camera devices, allowing an unauthenticated attacker to retrieve device information, such as capabilities, and network...

Selected Bosch Products Security Vulnerabilities

Bosch BVMS is an application system from Bosch Germany. It is used for video management. A security vulnerability exists in some Bosch products that stems from a formatting error on the API client side that results in improper handling of API response packets. An attacker exploiting this...

Bosch IP cameras Information Disclosure Vulnerability

Bosch IP cameras are network cameras from Bosch, Germany. An information disclosure vulnerability exists in Bosch IP cameras that originates from allowing an unauthenticated attacker to retrieve information about the device itself and the device's network settings. The following products and...

PT-2023-26989 · Bosch · Bosch Ip Cameras

Name of the Vulnerable Software and Affected Versions: Bosch IP cameras affected versions not specified Description: A command injection issue exists, allowing an authenticated user with administrative rights to execute arbitrary commands on the camera's operating system. Recommendations: At the...

Selected Bosch Products Security Vulnerabilities

Bosch Video Recording Manager VRM is a video recording manager from Bosch, Germany. A security vulnerability exists in some Bosch products. The vulnerability stems from a formatting error in the API server that results in mishandling of API requests, and can be exploited by an attacker to cause a...

PT-2023-23674 · Bosch · Bosch Bt

Name of the Vulnerable Software and Affected Versions: Bosch BT software products affected versions not specified Description: The issue is related to the improper handling of a malformed API request to an API server in Bosch BT software products. This can allow an unauthenticated attacker to cau...

Bosch IP cameras security breach

Bosch IP cameras are network cameras from Bosch, Germany. A security vulnerability exists in Bosch IP cameras that could allow a user with administrative privileges to run arbitrary commands on the camera's operating system. The following products and versions are affected: Bosch Camera CPP13...

Bosch ctrlX HMI Web Panel WR21 Access Control Error Vulnerability

Bosch ctrlX HMI Web Panel WR21 is an HMI panel from Bosch Germany. A security vulnerability exists in the Bosch ctrlX HMI Web Panel WR21 version that originates from a vulnerability that allows an unprivileged attacker with privileged access to the TPC-110W device subnet to gain root privileges a...