CVE-2023-39509

High

Description

A command injection vulnerability exists in Bosch IP cameras that allows an authenticated user with administrative rights to run arbitrary commands on the OS of the camera.

SeverityHigh

CVSS7.2

Exploit probability—

ProductBosch Cpp13 Firmware

PublishedDec 18, 2023

First seenDec 18, 2023

Weakness typeCWE-20Improper input validation

How to fix

Vendor advisories

psirt.bosch.com/security-advisories/BOSCH-SA-638184-BT.html

Affected products

Product	Affected versions	Fixed in
bosch cpp13_firmware	v ≤ 8.90	—
bosch cpp14_firmware	8.20 ≤ v ≤ 8.81	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.