CVE-2021-23851
Medium
Description
A specially crafted TCP/IP packet may cause the camera recovery image web interface to crash. It may also cause a buffer overflow which could enable remote code execution. The recovery image can only be booted with administrative rights or with physical access to the camera and allows the upload of a new firmware in case of a damaged firmware.
SeverityMedium
CVSS6.8
Exploit probability—
ProductBosch Autodome Ip 4000i Firmware
PublishedMar 30, 2022
First seenMar 30, 2022
Weakness typeCWE-121CWE-121
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bosch autodome_ip_4000i_firmware | cpp7.3 | — |
| bosch autodome_ip_5000i_firmware | cpp7.3 | — |
| bosch autodome_ip_starlight_5000i_firmware | cpp7.3 | — |
| bosch autodome_ip_starlight_7000i_firmware | cpp7.3 | — |
| bosch dinion_ip_3000i_firmware | cpp7.3 | — |
| bosch dinion_ip_bullet_4000i_firmware | cpp7.3 | — |
| bosch dinion_ip_bullet_5000_firmware | cpp7.3, cpp4 | — |
| bosch dinion_ip_bullet_5000i_firmware | cpp7.3 | — |
| bosch dinion_ip_bullet_6000i_firmware | cpp7.3 | — |
| bosch flexidome_ip_3000i_firmware | cpp7.3 | — |
| bosch flexidome_ip_4000i_firmware | cpp7.3 | — |
| bosch flexidome_ip_5000i_firmware | cpp7.3 | — |
| bosch flexidome_ip_starlight_5000i_firmware | cpp7.3 | — |
| bosch flexidome_ip_starlight_8000i_firmware | cpp7.3 | — |
| bosch mic_ip_starlight_7000i_firmware | cpp7.3 | — |
| bosch mic_ip_starlight_7100i_firmware | cpp7.3 | — |
| bosch mic_ip_ultra_7100i_firmware | cpp7.3 | — |
| bosch mic_ip_fusion_9000i_firmware | cpp7.3 | — |
| bosch dinion_ip_starlight_6000_firmware | cpp7 | — |
| bosch dinion_ip_starlight_7000_firmware | cpp7 | — |
| bosch dinion_ip_thermal_8000_firmware | cpp7 | — |
| bosch flexidome_ip_starlight_6000_firmware | cpp7 | — |
| bosch flexidome_ip_starlight_7000_firmware | cpp7 | — |
| bosch dinion_ip_thermal_9000_rm_firmware | cpp7 | — |
| bosch aviotec_ip_starlight_8000_firmware | cpp6 | — |
| bosch dinion_ip_starlight_8000_firmware | cpp6 | — |
| bosch dinion_ip_ultra_8000_firmware | cpp6 | — |
| bosch flexidome_ip_panoramic_6000_firmware | cpp6 | — |
| bosch flexidome_ip_panoramic_7000_firmware | cpp6 | — |
| bosch autodome_ip_4000_hd_firmware | cpp4 | — |
| bosch autodome_ip_5000_hd_firmware | cpp4 | — |
| bosch autodome_ip_5000_ir_firmware | cpp4 | — |
| bosch autodome_7000_firmware | cpp4 | — |
| bosch dinion_hd_1080p_firmware | cpp4 | — |
| bosch dinion_hd_1080p_hdr_firmware | cpp4 | — |
| bosch dinion_hd_720p_firmware | cpp4 | — |
| bosch dinion_imager_9000_hd_firmware | cpp4 | — |
| bosch dinion_ip_bullet_4000_firmware | cpp4 | — |
| bosch dinion_ip_4000_hd_firmware | cpp4 | — |
| bosch dinion_ip_5000_hd_firmware | cpp4 | — |
| bosch dinion_ip_5000_mp_firmware | cpp4 | — |
| bosch dinion_ip_starlight_7000_hd_firmware | cpp4 | — |
| bosch flexidome_corner_9000_mp_firmware | cpp4 | — |
| bosch flexidome_hd_1080p_firmware | cpp4 | — |
| bosch flexidome_hd_1080p_hdr_firmware | cpp4 | — |
| bosch flexidome_hd_720p_firmware | cpp4 | — |
| bosch vandal-proof_flexidome_hd_1080p_firmware | cpp4 | — |
| bosch vandal-proof_flexidome_hd_1080p_hdr_firmware | cpp4 | — |
| bosch vandal-proof_flexidome_hd_720p_firmware | cpp4 | — |
| bosch flexidome_ip_micro_2000_hd_firmware | cpp4 | — |
| bosch flexidome_ip_micro_2000_ip_firmware | cpp4 | — |
| bosch flexidome_ip_indoor_4000_hd_firmware | cpp4 | — |
| bosch flexidome_ip_indoor_4000_ir_firmware | cpp4 | — |
| bosch flexidome_ip_outdoor_4000_hd_firmware | cpp4 | — |
| bosch flexidome_ip_outdoor_4000_ir_firmware | cpp4 | — |
| bosch flexidome_ip_indoor_5000_hd_firmware | cpp4 | — |
| bosch flexidome_ip_indoor_5000_mp_firmware | cpp4 | — |
| bosch flexidome_ip_micro_5000_mp_firmware | cpp4 | — |
| bosch flexidome_ip_outdoor_5000_hd_firmware | cpp4 | — |
| bosch flexidome_ip_outdoor_5000_mp_firmware | cpp4 | — |
| bosch flexidome_ip_panoramic_5000_firmware | cpp4 | — |
| bosch ip_bullet_4000_hd_firmware | cpp4 | — |
| bosch ip_bullet_5000_hd_firmware | cpp4 | — |
| bosch ip_micro_2000_firmware | cpp4 | — |
| bosch ip_micro_2000_hd_firmware | cpp4 | — |
| bosch mic_ip_dynamic_7000_firmware | cpp4 | — |
| bosch mic_ip_starlight_7000_firmware | cpp4 | — |
| bosch tinyon_ip_2000_firmware | cpp4 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.