CVE-2022-41677: Medium severity bosch cpp14 firmware vulnerability
An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information (like capabilities) about the device itself and network settings of the device, disclosing possibly internal network settings if the device is connected to the internet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-41677?
CVE-2022-41677 has been classified as an information disclosure vulnerability.
How do I fix CVE-2022-41677?
To mitigate CVE-2022-41677, ensure that your Bosch IP camera devices are updated to the latest firmware version beyond the vulnerable versions.
What devices are affected by CVE-2022-41677?
CVE-2022-41677 affects Bosch Cpp14 Firmware up to version 8.80, Cpp13 Firmware up to version 8.48, and several older firmware versions listed in the advisory.
Can CVE-2022-41677 be exploited remotely?
Yes, CVE-2022-41677 allows unauthenticated attackers to exploit the vulnerability remotely.
What type of information can be exposed due to CVE-2022-41677?
CVE-2022-41677 may disclose sensitive information such as the device's capabilities and internal network settings.