CVE-2018-20299: Buffer Overflow

Published Dec 19, 2018
·
Updated

An issue was discovered in several Bosch Smart Home cameras (360 degree indoor camera and Eyes outdoor camera) with firmware before 6.52.4. A malicious client could potentially succeed in the unauthorized execution of code on the device via the network interface, because there is a buffer overflow in the RCP+ parser of the web server.

Affected Software

4 affected components
Bosch 360-indoor Camera Firmware<6.52.4
Bosch 360-indoor Camera
Bosch Eyes Outdoor Camera Firmware<6.52.4
Bosch Eyes outdoor camera

Event History

Dec 19, 2018
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description

Frequently Asked Questions

1

What is the severity of CVE-2018-20299?

CVE-2018-20299 is considered to have a high severity due to the potential for unauthorized code execution.

2

How do I fix CVE-2018-20299?

To resolve CVE-2018-20299, it is recommended to update the firmware of Bosch Smart Home cameras to version 6.52.4 or later.

3

Which Bosch Smart Home cameras are affected by CVE-2018-20299?

CVE-2018-20299 affects the Bosch 360 degree indoor camera and the Eyes outdoor camera with firmware versions prior to 6.52.4.

4

What type of vulnerability is CVE-2018-20299?

CVE-2018-20299 is a buffer overflow vulnerability that can allow unauthorized execution of code on the device.

5

Can CVE-2018-20299 be exploited remotely?

Yes, CVE-2018-20299 can potentially be exploited remotely through the network interface.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203