Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2021-23853 Details

In Bosch IP cameras, improper validation of the HTTP header allows an attacker to inject arbitrary HTTP headers through crafted URLs.

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:9.8 CRITICALVector:CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CNA: [email protected]CVSS-B:8.3 HIGHVector:CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://psirt.bosch.com/security-advisories/bosch-sa-478243-bt.html	CVE	Vendor Advisory
https://psirt.bosch.com/security-advisories/bosch-sa-478243-bt.html	[email protected]	Vendor Advisory

CWE-ID	CWE Name	Source
CWE-20	Improper Input Validation	[email protected]
CWE-20	Improper Input Validation	[email protected]

Product	Versions
bosch cpp4 firmware	All versions
CPE cpe:2.3:o:bosch:cpp4_firmware:-:::::::* Remediation No remediation found in references.
bosch cpp4	All versions
CPE cpe:2.3:h:bosch:cpp4:-:::::::* Remediation No remediation found in references.
bosch cpp6 firmware	All versions
CPE cpe:2.3:o:bosch:cpp6_firmware:-:::::::* Remediation No remediation found in references.
bosch cpp6	All versions
CPE cpe:2.3:h:bosch:cpp6:-:::::::* Remediation No remediation found in references.
bosch cpp7 firmware	All versions
CPE cpe:2.3:o:bosch:cpp7_firmware:-:::::::* Remediation No remediation found in references.
bosch cpp7	All versions
CPE cpe:2.3:h:bosch:cpp7:-:::::::* Remediation No remediation found in references.
bosch cpp7.3 firmware	All versions
CPE cpe:2.3:o:bosch:cpp7.3_firmware:-:::::::* Remediation No remediation found in references.
bosch cpp7.3	All versions
CPE cpe:2.3:h:bosch:cpp7.3:-:::::::* Remediation No remediation found in references.
bosch cpp13 firmware	All versions
CPE cpe:2.3:o:bosch:cpp13_firmware:-:::::::* Remediation No remediation found in references.
bosch cpp13	All versions
CPE cpe:2.3:h:bosch:cpp13:-:::::::* Remediation No remediation found in references.

4 change records found show changes

QUICK INFO