by Kastro
Paper/Archive/CVE-2021-23853

CVE-2021-23853

Bosch CPP Firmware — Improper Input Validation of HTTP Headers

EPSS 0.9%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 58.6.586 × 2011.7No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

In Bosch IP cameras, improper validation of the HTTP header allows an attacker to inject arbitrary HTTP headers through crafted URLs.

Affected

ProductAffectedFixed inSource
CPP Firmwareall–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
bosch (CNA)8.3CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

References

refpsirt.bosch.com/security-advisories/bosch-sa-478243-bt.html