CVE-2023-32229

Medium

Description

Due to an error in the software interface to the secure element chip on Bosch IP cameras of family CPP13 and CPP14, the chip can be permanently damaged when enabling the Stream security option (signing of the video stream) with option MD5, SHA-1 or SHA-256.

SeverityMedium

CVSS4.9

Exploit probability—

ProductBosch Cpp13 Firmware

PublishedJun 15, 2023

First seenJun 15, 2023

Weakness typeCWE-1246CWE-1246

How to fix

Update

bosch cpp13_firmware8.48.0017 or later
bosch cpp14_firmware8.80.0090 or later

Vendor advisories

psirt.bosch.com/security-advisories/BOSCH-SA-435698-BT.html

Affected products

Product	Affected versions	Fixed in
bosch cpp13_firmware	v < 8.48.0017	8.48.0017
bosch cpp14_firmware	8.50 ≤ v < 8.80.0090	8.80.0090

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.