CVE-2021-23849

CVE-2021-23849 concerns Bosch IP cameras with a web-based management interface. The vulnerability is CSRF: an unauthenticated attacker can induce actions on behalf of a logged-in user by convincing them to click a malicious link or visit a malicious site, while the victim is authenticated to the ...

CVE-2021-23854

CVE-2021-23854 affects Bosch IP cameras’ web interface due to an error in handling the page parameter, enabling a reflected XSS in versions 7.7x and 7.6x. The issue is limited to these versions; other versions are not affected. The CVSS/metrics show a medium to high impact depending on scenario; ...

CVE-2021-23848

CVE-2021-23848 describes a reflected XSS against the Bosch IP cameras web UI. The issue arises from the URL handling in the camera’s web interface, where an attacker who knows the camera address can send a crafted link that causes the victim’s browser to execute JavaScript in the user’s context. ...