CVE-2018-20299
Critical
Description
An issue was discovered in several Bosch Smart Home cameras (360 degree indoor camera and Eyes outdoor camera) with firmware before 6.52.4. A malicious client could potentially succeed in the unauthorized execution of code on the device via the network interface, because there is a buffer overflow in the RCP+ parser of the web server.
SeverityCritical
CVSS9.8
Exploit probability—
ProductBosch Eyes Outdoor Camera Firmware
PublishedDec 19, 2018
First seenDec 19, 2018
How to fix
Update
- bosch eyes_outdoor_camera_firmware6.52.4 or later
- bosch 360-indoor_camera_firmware6.52.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bosch eyes_outdoor_camera_firmware | v < 6.52.4 | 6.52.4 |
| bosch 360-indoor_camera_firmware | v < 6.52.4 | 6.52.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.