CVE-2021-23852mediumCWE-400

CVE-2021-23852: falha de média gravidade em Bosch CPP Firmware

Denial of Service (DoS) due to invalid web parameter

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar CPP

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.9epss 0.8%
An authenticated attacker with administrator rights Bosch IP cameras can call an URL with an invalid parameter that causes the camera to become unresponsive for a few seconds and cause a Denial of Service (DoS).
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
Bosch · CPP Firmware
CVEs relacionadas — Bosch CPP Firmware

No mesmo produto, das mais perigosas para as menos.

CVE-2021-23851MEDIUMBuffer Overflow vulnerability in the recovery image web-based interfaceEPSS 1.6%CVE-2021-23850MEDIUMBuffer Overflow vulnerability in the recovery image telnet serverEPSS 1.6%CVE-2021-23847CRITICALUnauthenticated Information Extraction VulnerabilityEPSS 1.4%CVE-2021-23853HIGHImproper Input Validation of HTTP HeadersEPSS 0.9%CVE-2021-23854HIGHReflected XSS in page parameterEPSS 0.6%CVE-2021-23848HIGHReflected XSS in URL handlerEPSS 0.6%