CVE-2021-23852: Denial of Service (DoS) due to invalid web parameter

Published Jun 9, 2021

Updated

An authenticated attacker with administrator rights Bosch IP cameras can call an URL with an invalid parameter that causes the camera to become unresponsive for a few seconds and cause a Denial of Service (DoS).

Affected Software

10 affected components

Bosch Cpp4 Firmware

Bosch Cpp4

Bosch Cpp6 Firmware

Bosch CPP6

Bosch Cpp7 Firmware

Bosch CPP7

Bosch Cpp7.3 Firmware

Bosch CPP7.3

Bosch Cpp13 Firmware

Bosch Cpp13

Event History

Jun 9, 2021

CVE Published

via MITRE·02:18 PM

Data Sourced

via MITRE·02:18 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID for this Bosch IP camera vulnerability?

The vulnerability ID for this Bosch IP camera vulnerability is CVE-2021-23852.

What is the severity of CVE-2021-23852?

The severity of CVE-2021-23852 is medium.

What is the affected software for CVE-2021-23852?

The affected software for CVE-2021-23852 includes Bosch Cpp4 Firmware, Bosch Cpp6 Firmware, Bosch Cpp7 Firmware, Bosch Cpp7.3 Firmware, and Bosch Cpp13 Firmware.

How can an attacker exploit CVE-2021-23852?

An authenticated attacker with administrator rights can exploit CVE-2021-23852 by calling a URL with an invalid parameter, causing the camera to become unresponsive and resulting in a Denial of Service (DoS) condition.

Is Bosch Cpp4 vulnerable to CVE-2021-23852?

No, Bosch Cpp4 is not vulnerable to CVE-2021-23852.