CVEvulnerability

CVE-2022-41677

5.3 MEDIUM Published 2023-12-18 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-12-18
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses
CWE-284

Description

An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information (like capabilities) about the device itself and network settings of the device, disclosing possibly internal network settings if the device is connected to the internet.

Affected configurations

• bosch cpp14 firmware (<= 8.80) • bosch cpp13 firmware (<= 8.48) • bosch cpp7.3 firmware (<= 7.86) • bosch cpp7 firmware (<= 7.86) • bosch cpp6 firmware (<= 7.86) • bosch cpp4 firmware (<= 7.10)

Related

Weakness · CWE (1)

  • CWE-284 Improper Access Control weakness

References