A vulnerability in the web-based interface allows an unauthenticated remote attacker to trigger actions on an affected system on behalf of another user (CSRF - Cross Site Request Forgery). This requires the victim to be tricked into clicking a malicious link or opening a malicious website while being logged in into the camera.
oryginał ENCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:HBosch Aviotec
HWBoschwszystkie wersjeBosch Aviotec Firmware
OSBosch7.617.72Bosch Cpp13
HWBoschwszystkie wersjeBosch Cpp13 Firmware
OSBosch7.75Bosch Cpp14
HWBoschwszystkie wersjeBosch Cpp14 Firmware
OSBosch8.00Bosch Cpp4
HWBoschwszystkie wersjeBosch Cpp4 Firmware
OSBosch7.10Bosch Cpp6
HWBoschwszystkie wersjeBosch Cpp6 Firmware
OSBosch7.607.617.707.80Bosch Cpp7
HWBoschwszystkie wersjeBosch Cpp7.3
HWBoschwszystkie wersjeBosch Cpp7.3 Firmware
OSBosch7.607.617.627.707.727.737.80Bosch Cpp7 Firmware
OSBosch7.607.617.707.727.80
Powiązane podatności
A Missing Authentication in Critical Function in Bosch IP cameras allows an unauthenticated remote attacker to...
A command injection vulnerability exists in Bosch IP cameras that allows an authenticated user with administra...
In Bosch IP cameras, improper validation of the HTTP header allows an attacker to inject arbitrary HTTP header...
An error in the handling of a page parameter in Bosch IP cameras may lead to a reflected cross site scripting ...
An error in the URL handler Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-bas...