Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-222p-ppph-c5v8

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A Missing Authentication in Critical Function in Bosch IP cameras allows an unauthenticated remote attacker to extract sensitive information or change settings of the camera by sending crafted requests to the device. Only devices of the CPP6, CPP7 and CPP7.3 family with firmware 7.70, 7.72, and 7.80 prior to B128 are affected by this vulnerability. Versions 7.62 or lower and INTEOX cameras are not affected.

A Missing Authentication in Critical Function in Bosch IP cameras allows an unauthenticated remote attacker to extract sensitive information or change settings of the camera by sending crafted requests to the device. Only devices of the CPP6, CPP7 and CPP7.3 family with firmware 7.70, 7.72, and 7.80 prior to B128 are affected by this vulnerability. Versions 7.62 or lower and INTEOX cameras are not affected.

EPSS

Процентиль: 56%
0.00336
Низкий

Дефекты

CWE-306

Связанные уязвимости

CVSS3: 9.8
nvd
около 4 лет назад

A Missing Authentication in Critical Function in Bosch IP cameras allows an unauthenticated remote attacker to extract sensitive information or change settings of the camera by sending crafted requests to the device. Only devices of the CPP6, CPP7 and CPP7.3 family with firmware 7.70, 7.72, and 7.80 prior to B128 are affected by this vulnerability. Versions 7.62 or lower and INTEOX cameras are not affected.

CVSS3: 9.8
fstec
около 4 лет назад

Уязвимость микропрограммного обеспечения IP-камер Bosch серий CPP6 UHD/MP, CPP7 UHD/MP, CPP7.3 UHD/MP, связанная с отсутствием процедуры аутентификации, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации или изменить настройки

EPSS

Процентиль: 56%
0.00336
Низкий

Дефекты

CWE-306