CVE-2021-23849: Cross Site Request Forgery (CSRF) vulnerability in web based management interface
First published: Thu Aug 05 2021(Updated: )
A vulnerability in the web-based interface allows an unauthenticated remote attacker to trigger actions on an affected system on behalf of another user (CSRF - Cross Site Request Forgery). This requires the victim to be tricked into clicking a malicious link or opening a malicious website while being logged in into the camera.
Credit: psirt@bosch.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Bosch Common Product Platform 4 Firmware | =7.10 | |
| Bosch Cpp4 Firmware | ||
| Bosch Cpp6 | =7.60 | |
| Bosch Cpp6 | =7.61 | |
| Bosch Cpp6 | =7.70 | |
| Bosch Cpp6 | =7.80 | |
| Bosch Cpp6 Firmware | ||
| Bosch Aviotec Firmware | =7.61 | |
| Bosch Aviotec Firmware | =7.72 | |
| Bosch Aviotec | ||
| Bosch Cpp7.3 Firmware | =7.60 | |
| Bosch Cpp7.3 Firmware | =7.61 | |
| Bosch Cpp7.3 Firmware | =7.70 | |
| Bosch Cpp7.3 Firmware | =7.72 | |
| Bosch Cpp7.3 Firmware | =7.80 | |
| Bosch Cpp7 Firmware | ||
| Bosch Common Product Platform 7.3 Firmware | =7.60 | |
| Bosch Common Product Platform 7.3 Firmware | =7.61 | |
| Bosch Common Product Platform 7.3 Firmware | =7.62 | |
| Bosch Common Product Platform 7.3 Firmware | =7.70 | |
| Bosch Common Product Platform 7.3 Firmware | =7.72 | |
| Bosch Common Product Platform 7.3 Firmware | =7.73 | |
| Bosch Common Product Platform 7.3 Firmware | =7.80 | |
| Bosch Common Product Platform 7.3 Firmware | ||
| Bosch Cpp13 Firmware | =7.75 | |
| Bosch Cpp13 Firmware | ||
| Bosch Cpp14 Firmware | =8.00 | |
| Bosch Cpp14 Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2021-23849?
CVE-2021-23849 is a vulnerability in the web-based interface that allows an unauthenticated remote attacker to trigger actions on an affected system on behalf of another user (CSRF - Cross Site Request Forgery).
How severe is CVE-2021-23849?
CVE-2021-23849 has a severity rating of 8.8 (high).
Which software versions are affected by CVE-2021-23849?
CVE-2021-23849 affects Bosch Cpp4 Firmware version 7.10, Bosch Cpp6 Firmware versions 7.60, 7.61, 7.70, and 7.80, Bosch Aviotec Firmware versions 7.61 and 7.72, Bosch Cpp7 Firmware versions 7.60, 7.61, 7.70, 7.72, and 7.80, Bosch Cpp7.3 Firmware versions 7.60, 7.61, 7.62, 7.70, 7.72, 7.73, and 7.80, Bosch Cpp13 Firmware version 7.75, and Bosch Cpp14 Firmware version 8.00.
How can the CVE-2021-23849 vulnerability be exploited?
The CVE-2021-23849 vulnerability can be exploited by tricking the victim into clicking a malicious link or opening a malicious website.
Is CVE-2021-23849 fixed?
There is no information available about a fix for CVE-2021-23849 at the moment. It is recommended to follow the recommended security practices and monitor for any updates from the vendor.
- agent/type
- agent/softwarecombine
- agent/references
- agent/severity
- agent/title
- agent/weakness
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/bosch
- canonical/bosch common product platform 4 firmware
- version/bosch common product platform 4 firmware/7.10
- canonical/bosch cpp4 firmware
- canonical/bosch cpp6
- version/bosch cpp6/7.60
- version/bosch cpp6/7.61
- version/bosch cpp6/7.70
- version/bosch cpp6/7.80
- canonical/bosch cpp6 firmware
- canonical/bosch aviotec firmware
- version/bosch aviotec firmware/7.61
- version/bosch aviotec firmware/7.72
- canonical/bosch aviotec
- canonical/bosch cpp7.3 firmware
- version/bosch cpp7.3 firmware/7.60
- version/bosch cpp7.3 firmware/7.61
- version/bosch cpp7.3 firmware/7.70
- version/bosch cpp7.3 firmware/7.72
- version/bosch cpp7.3 firmware/7.80
- canonical/bosch cpp7 firmware
- canonical/bosch common product platform 7.3 firmware
- version/bosch common product platform 7.3 firmware/7.60
- version/bosch common product platform 7.3 firmware/7.61
- version/bosch common product platform 7.3 firmware/7.62
- version/bosch common product platform 7.3 firmware/7.70
- version/bosch common product platform 7.3 firmware/7.72
- version/bosch common product platform 7.3 firmware/7.73
- version/bosch common product platform 7.3 firmware/7.80
- canonical/bosch cpp13 firmware
- version/bosch cpp13 firmware/7.75
- canonical/bosch cpp14 firmware
- version/bosch cpp14 firmware/8.00