CVE-2021-23851mediumCWE-121

CVE-2021-23851: falha de média gravidade em Bosch CPP Firmware

Buffer Overflow vulnerability in the recovery image web-based interface

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar CPP

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.8epss 1.6%
A specially crafted TCP/IP packet may cause the camera recovery image web interface to crash. It may also cause a buffer overflow which could enable remote code execution. The recovery image can only be booted with administrative rights or with physical access to the camera and allows the upload of a new firmware in case of a damaged firmware.
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Bosch · CPP Firmware
CVEs relacionadas — Bosch CPP Firmware

No mesmo produto, das mais perigosas para as menos.

CVE-2021-23850MEDIUMBuffer Overflow vulnerability in the recovery image telnet serverEPSS 1.6%CVE-2021-23847CRITICALUnauthenticated Information Extraction VulnerabilityEPSS 1.4%CVE-2021-23853HIGHImproper Input Validation of HTTP HeadersEPSS 0.9%CVE-2021-23852MEDIUMDenial of Service (DoS) due to invalid web parameterEPSS 0.8%CVE-2021-23854HIGHReflected XSS in page parameterEPSS 0.6%CVE-2021-23848HIGHReflected XSS in URL handlerEPSS 0.6%