CVE-2021-23854
Published Jun 9, 2021
Last updated 3 years ago
Overview
- Description
- An error in the handling of a page parameter in Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interface. This issue only affects versions 7.7x and 7.6x. All other versions are not affected.
- Source
- psirt@bosch.com
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 6.1
- Impact score
- 2.7
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Severity
- MEDIUM
CVSS 2.0
- Type
- Primary
- Base score
- 4.3
- Impact score
- 2.9
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:N/I:P/A:N
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:bosch:cpp6_firmware:7.62:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C96B16C2-DEAE-49E9-82A9-E78101359AC1"
},
{
"criteria": "cpe:2.3:o:bosch:cpp6_firmware:7.70:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ED954BF7-DD03-4B91-8F4F-CACE2E8BDDA0"
},
{
"criteria": "cpe:2.3:o:bosch:cpp6_firmware:7.72:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9E3D5E9E-A2FA-424D-893F-6D5C92F5D717"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:bosch:cpp6:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "27B65C05-69F5-4048-BCBE-DA0D53EF9AFE"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:bosch:cpp7_firmware:7.62:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F081DC82-F2DD-4038-BF86-48B2781050E5"
},
{
"criteria": "cpe:2.3:o:bosch:cpp7_firmware:7.70:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7DA98BAE-2029-43EF-9B62-08183FB24BC1"
},
{
"criteria": "cpe:2.3:o:bosch:cpp7_firmware:7.72:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "29E2AC5D-E6AA-4835-95A0-DE4885001BE6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:bosch:cpp7:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E8339008-8889-47B0-9416-CCC6CE75D277"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:bosch:cpp7.3_firmware:7.62:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F0D19012-4183-4293-B98C-292428FB6DB9"
},
{
"criteria": "cpe:2.3:o:bosch:cpp7.3_firmware:7.70:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7113AE94-1C25-40AF-98F9-0A457DE063B0"
},
{
"criteria": "cpe:2.3:o:bosch:cpp7.3_firmware:7.72:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B0EF3F6B-C978-4BB3-B33E-EA809CE9E851"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:bosch:cpp7.3:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5B97B95A-8143-4766-9F10-87E19AED22C6"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:bosch:cpp13_firmware:7.75:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "68D04488-DE68-407E-B428-5F51DEA0B07C"
},
{
"criteria": "cpe:2.3:o:bosch:cpp13_firmware:7.76:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22BF21F0-F138-41EB-88BF-FF6B051C242E"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:bosch:cpp13:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "80149FF9-3C6D-4C80-8257-CEB2BE8B0DCA"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]