CVE-2021-23849: Cross Site Request Forgery (CSRF) vulnerability in web based management interface
A vulnerability in the web-based interface allows an unauthenticated remote attacker to trigger actions on an affected system on behalf of another user (CSRF - Cross Site Request Forgery). This requires the victim to be tricked into clicking a malicious link or opening a malicious website while being logged in into the camera.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-23849?
CVE-2021-23849 is a vulnerability in the web-based interface that allows an unauthenticated remote attacker to trigger actions on an affected system on behalf of another user (CSRF - Cross Site Request Forgery).
How severe is CVE-2021-23849?
CVE-2021-23849 has a severity rating of 8.8 (high).
Which software versions are affected by CVE-2021-23849?
CVE-2021-23849 affects Bosch Cpp4 Firmware version 7.10, Bosch Cpp6 Firmware versions 7.60, 7.61, 7.70, and 7.80, Bosch Aviotec Firmware versions 7.61 and 7.72, Bosch Cpp7 Firmware versions 7.60, 7.61, 7.70, 7.72, and 7.80, Bosch Cpp7.3 Firmware versions 7.60, 7.61, 7.62, 7.70, 7.72, 7.73, and 7.80, Bosch Cpp13 Firmware version 7.75, and Bosch Cpp14 Firmware version 8.00.
How can the CVE-2021-23849 vulnerability be exploited?
The CVE-2021-23849 vulnerability can be exploited by tricking the victim into clicking a malicious link or opening a malicious website.
Is CVE-2021-23849 fixed?
There is no information available about a fix for CVE-2021-23849 at the moment. It is recommended to follow the recommended security practices and monitor for any updates from the vendor.