CVE-2022-41677
- State
- Published
- Severity
- 5.3 Medium
- Published
- Dec 18, 2023
- Updated
- Nov 27, 2024
- Reserved
- Sep 28, 2022
Description
An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information (like capabilities) about the device itself and network settings of the device, disclosing possibly internal network settings if the device is connected to the internet.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.3 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | bosch |
Weaknesses
- CWE-284 Improper Access Control
Affected Products
| Product | Versions |
|---|---|
Camera FirmwareBosch |
|
Camera FirmwareBosch |
|
Camera FirmwareBosch |
|
Camera FirmwareBosch |
|
Camera FirmwareBosch |
|
Camera FirmwareBosch |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.