CVE-2021-23850: Buffer Overflow vulnerability in the recovery image telnet server

First published: Wed Mar 30 2022(Updated: )

A specially crafted TCP/IP packet may cause a camera recovery image telnet interface to crash. It may also cause a buffer overflow which could enable remote code execution. The recovery image can only be booted with administrative rights or with physical access to the camera and allows the upload of a new firmware in case of a damaged firmware.

Credit: psirt@bosch.com

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-index
• agent/references
• agent/type
• agent/softwarecombine
• collector/mitre-cve
• source/MITRE
• agent/severity
• agent/title
• agent/last-modified-date
• agent/weakness
• agent/author
• agent/tags
• agent/first-publish-date
• agent/event
• agent/description
• vendor/bosch
• canonical/bosch autodome ip 4000i firmware
• version/bosch autodome ip 4000i firmware/cpp7.3
• canonical/bosch autodome ip 4000i
• canonical/bosch autodome ip 5000i firmware
• version/bosch autodome ip 5000i firmware/cpp7.3
• canonical/bosch autodome ip 5000i
• canonical/bosch autodome ip starlight 5000i firmware
• version/bosch autodome ip starlight 5000i firmware/cpp7.3
• canonical/bosch autodome ip starlight 5000i
• canonical/bosch autodome ip starlight 7000i firmware
• version/bosch autodome ip starlight 7000i firmware/cpp7.3
• canonical/bosch autodome ip starlight 7000i
• canonical/bosch dinion ip 3000i firmware
• version/bosch dinion ip 3000i firmware/cpp7.3
• canonical/bosch dinion ip 3000i
• canonical/bosch dinion ip bullet 4000i firmware
• version/bosch dinion ip bullet 4000i firmware/cpp7.3
• canonical/bosch dinion ip bullet 4000i
• canonical/bosch dinion ip bullet 5000 firmware
• version/bosch dinion ip bullet 5000 firmware/cpp7.3
• canonical/bosch dinion ip bullet 5000
• canonical/bosch dinion ip bullet 5000i firmware
• version/bosch dinion ip bullet 5000i firmware/cpp7.3
• canonical/bosch dinion ip bullet 5000i
• canonical/bosch dinion ip bullet 6000i firmware
• version/bosch dinion ip bullet 6000i firmware/cpp7.3
• canonical/bosch dinion ip bullet 6000i
• canonical/bosch flexidome ip 3000i firmware
• version/bosch flexidome ip 3000i firmware/cpp7.3
• canonical/bosch flexidome ip 3000i
• canonical/bosch flexidome ip 4000i firmware
• version/bosch flexidome ip 4000i firmware/cpp7.3
• canonical/bosch flexidome ip 4000i
• canonical/bosch flexidome ip 5000i firmware
• version/bosch flexidome ip 5000i firmware/cpp7.3
• canonical/bosch flexidome ip 5000i
• canonical/bosch flexidome ip starlight 5000i firmware
• version/bosch flexidome ip starlight 5000i firmware/cpp7.3
• canonical/bosch flexidome ip starlight 5000i
• canonical/bosch flexidome ip starlight 8000i firmware
• version/bosch flexidome ip starlight 8000i firmware/cpp7.3
• canonical/bosch flexidome ip starlight 8000i
• canonical/bosch mic ip starlight 7000i firmware
• version/bosch mic ip starlight 7000i firmware/cpp7.3
• canonical/bosch mic ip starlight 7000i
• canonical/bosch mic ip starlight 7100i firmware
• version/bosch mic ip starlight 7100i firmware/cpp7.3
• canonical/bosch mic ip starlight 7100i
• canonical/bosch mic ip ultra 7100i firmware
• version/bosch mic ip ultra 7100i firmware/cpp7.3
• canonical/bosch mic ip ultra 7100i
• canonical/bosch mic ip fusion 9000i firmware
• version/bosch mic ip fusion 9000i firmware/cpp7.3
• canonical/bosch mic ip fusion 9000i
• canonical/bosch dinion ip starlight 6000 firmware
• version/bosch dinion ip starlight 6000 firmware/cpp7
• canonical/bosch dinion ip starlight 6000
• canonical/bosch dinion ip starlight 7000 firmware
• version/bosch dinion ip starlight 7000 firmware/cpp7
• canonical/bosch dinion ip starlight 7000
• canonical/bosch dinion ip thermal 8000 firmware
• version/bosch dinion ip thermal 8000 firmware/cpp7
• canonical/bosch dinion ip thermal 8000
• canonical/bosch flexidome ip starlight 6000 firmware
• version/bosch flexidome ip starlight 6000 firmware/cpp7
• canonical/bosch flexidome ip starlight 6000
• canonical/bosch flexidome ip starlight 7000 firmware
• version/bosch flexidome ip starlight 7000 firmware/cpp7
• canonical/bosch flexidome ip starlight 7000
• canonical/bosch dinion ip thermal 9000 rm firmware
• version/bosch dinion ip thermal 9000 rm firmware/cpp7
• canonical/bosch dinion ip thermal 9000 rm
• canonical/bosch aviotec ip starlight 8000 firmware
• version/bosch aviotec ip starlight 8000 firmware/cpp6
• canonical/bosch aviotec ip starlight 8000
• canonical/bosch dinion ip starlight 8000 firmware
• version/bosch dinion ip starlight 8000 firmware/cpp6
• canonical/bosch dinion ip starlight 8000
• canonical/bosch dinion ip ultra 8000 firmware
• version/bosch dinion ip ultra 8000 firmware/cpp6
• canonical/bosch dinion ip ultra 8000
• canonical/bosch flexidome ip panoramic 6000 firmware
• version/bosch flexidome ip panoramic 6000 firmware/cpp6
• canonical/bosch flexidome ip panoramic 6000
• canonical/bosch flexidome ip panoramic 7000 firmware
• version/bosch flexidome ip panoramic 7000 firmware/cpp6
• canonical/bosch flexidome ip panoramic 7000
• canonical/bosch autodome ip 4000 hd firmware
• version/bosch autodome ip 4000 hd firmware/cpp4
• canonical/bosch autodome ip 4000 hd
• canonical/bosch autodome ip 5000 hd firmware
• version/bosch autodome ip 5000 hd firmware/cpp4
• canonical/bosch autodome ip 5000 hd
• canonical/bosch autodome ip 5000 ir firmware
• version/bosch autodome ip 5000 ir firmware/cpp4
• canonical/bosch autodome ip 5000 ir
• canonical/bosch autodome 7000 firmware
• version/bosch autodome 7000 firmware/cpp4
• canonical/bosch autodome 7000
• canonical/bosch dinion hd 1080p firmware
• version/bosch dinion hd 1080p firmware/cpp4
• canonical/bosch dinion hd 1080p
• canonical/bosch dinion hd 1080p hdr firmware
• version/bosch dinion hd 1080p hdr firmware/cpp4
• canonical/bosch dinion hd 1080p hdr
• canonical/bosch dinion hd 720p firmware
• version/bosch dinion hd 720p firmware/cpp4
• canonical/bosch dinion hd 720p
• canonical/bosch dinion imager 9000 hd firmware
• version/bosch dinion imager 9000 hd firmware/cpp4
• canonical/bosch dinion imager 9000 hd
• canonical/bosch dinion ip bullet 4000 firmware
• version/bosch dinion ip bullet 4000 firmware/cpp4
• canonical/bosch dinion ip bullet 4000
• version/bosch dinion ip bullet 5000 firmware/cpp4
• canonical/bosch dinion ip 4000 hd firmware
• version/bosch dinion ip 4000 hd firmware/cpp4
• canonical/bosch dinion ip 4000 hd
• canonical/bosch dinion ip 5000 hd firmware
• version/bosch dinion ip 5000 hd firmware/cpp4
• canonical/bosch dinion ip 5000 hd
• canonical/bosch dinion ip 5000 mp firmware
• version/bosch dinion ip 5000 mp firmware/cpp4
• canonical/bosch dinion ip 5000 mp
• canonical/bosch dinion ip starlight 7000 hd firmware
• version/bosch dinion ip starlight 7000 hd firmware/cpp4
• canonical/bosch dinion ip starlight 7000 hd
• canonical/bosch flexidome corner 9000 mp firmware
• version/bosch flexidome corner 9000 mp firmware/cpp4
• canonical/bosch flexidome corner 9000 mp
• canonical/bosch flexidome hd 1080p firmware
• version/bosch flexidome hd 1080p firmware/cpp4
• canonical/bosch flexidome hd 1080p
• canonical/bosch flexidome hd 1080p hdr firmware
• version/bosch flexidome hd 1080p hdr firmware/cpp4
• canonical/bosch flexidome hd 1080p hdr
• canonical/bosch flexidome hd 720p firmware
• version/bosch flexidome hd 720p firmware/cpp4
• canonical/bosch flexidome hd 720p
• canonical/bosch vandal-proof flexidome hd 1080p firmware
• version/bosch vandal-proof flexidome hd 1080p firmware/cpp4
• canonical/bosch vandal-proof flexidome hd 1080p
• canonical/bosch vandal-proof flexidome hd 1080p hdr firmware
• version/bosch vandal-proof flexidome hd 1080p hdr firmware/cpp4
• canonical/bosch vandal-proof flexidome hd 1080p hdr
• canonical/bosch vandal-proof flexidome hd 720p firmware
• version/bosch vandal-proof flexidome hd 720p firmware/cpp4
• canonical/bosch vandal-proof flexidome hd 720p
• canonical/bosch flexidome ip micro 2000 hd firmware
• version/bosch flexidome ip micro 2000 hd firmware/cpp4
• canonical/bosch flexidome ip micro 2000 hd
• canonical/bosch flexidome ip micro 2000 ip firmware
• version/bosch flexidome ip micro 2000 ip firmware/cpp4
• canonical/bosch flexidome ip micro 2000 ip
• canonical/bosch flexidome ip indoor 4000 hd firmware
• version/bosch flexidome ip indoor 4000 hd firmware/cpp4
• canonical/bosch flexidome ip indoor 4000 hd
• canonical/bosch flexidome ip indoor 4000 ir firmware
• version/bosch flexidome ip indoor 4000 ir firmware/cpp4
• canonical/bosch flexidome ip indoor 4000 ir
• canonical/bosch flexidome ip outdoor 4000 hd firmware
• version/bosch flexidome ip outdoor 4000 hd firmware/cpp4
• canonical/bosch flexidome ip outdoor 4000 hd
• canonical/bosch flexidome ip outdoor 4000 ir firmware
• version/bosch flexidome ip outdoor 4000 ir firmware/cpp4
• canonical/bosch flexidome ip outdoor 4000 ir
• canonical/bosch flexidome ip indoor 5000 hd firmware
• version/bosch flexidome ip indoor 5000 hd firmware/cpp4
• canonical/bosch flexidome ip indoor 5000 hd
• canonical/bosch flexidome ip indoor 5000 mp firmware
• version/bosch flexidome ip indoor 5000 mp firmware/cpp4
• canonical/bosch flexidome ip indoor 5000 mp
• canonical/bosch flexidome ip micro 5000 mp firmware
• version/bosch flexidome ip micro 5000 mp firmware/cpp4
• canonical/bosch flexidome ip micro 5000 mp
• canonical/bosch flexidome ip outdoor 5000 hd firmware
• version/bosch flexidome ip outdoor 5000 hd firmware/cpp4
• canonical/bosch flexidome ip outdoor 5000 hd
• canonical/bosch flexidome ip outdoor 5000 mp firmware
• version/bosch flexidome ip outdoor 5000 mp firmware/cpp4
• canonical/bosch flexidome ip outdoor 5000 mp
• canonical/bosch flexidome ip panoramic 5000 firmware
• version/bosch flexidome ip panoramic 5000 firmware/cpp4
• canonical/bosch flexidome ip panoramic 5000
• canonical/bosch ip bullet 4000 hd firmware
• version/bosch ip bullet 4000 hd firmware/cpp4
• canonical/bosch ip bullet 4000 hd
• canonical/bosch ip bullet 5000 hd firmware
• version/bosch ip bullet 5000 hd firmware/cpp4
• canonical/bosch ip bullet 5000 hd
• canonical/bosch ip micro 2000 firmware
• version/bosch ip micro 2000 firmware/cpp4
• canonical/bosch ip micro 2000
• canonical/bosch ip micro 2000 hd firmware
• version/bosch ip micro 2000 hd firmware/cpp4
• canonical/bosch ip micro 2000 hd
• canonical/bosch mic ip dynamic 7000 firmware
• version/bosch mic ip dynamic 7000 firmware/cpp4
• canonical/bosch mic ip dynamic 7000
• canonical/bosch mic ip starlight 7000 firmware
• version/bosch mic ip starlight 7000 firmware/cpp4
• canonical/bosch mic ip starlight 7000
• canonical/bosch tinyon ip 2000 firmware
• version/bosch tinyon ip 2000 firmware/cpp4
• canonical/bosch tinyon ip 2000