Alexander Nochvay

The issue concerns the use of the Blowfish symmetric encryption algorithm in communication between the AMC2 and the host system. An attacker with access to the local network, typically on the same subnet, could retrieve the key from the firmware to decrypt network traffic. This allows the attacker to modify network traffic, decrypt and investigate the device's firmware file, and change the device configuration.

The Bosch software tools are used to configure settings in AMC2 devices and allow password protection to restrict access. However, an attacker can circumvent this protection, making unauthorized changes to configuration data or manipulating the device's configuration, potentially making it unresponsive in the local network. The attacker must have access to the local network, typically the same subnet.

Name of the Vulnerable Software and Affected Versions: Bosch IP cameras (affected versions not specified) Description: The issue is related to an error in the URL handler of the web-based interface, which may lead to a reflected cross-site scripting (XSS) attack. An attacker with knowledge of the camera address can send a crafted link to a user, executing JavaScript code in the context of the user. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

A Missing Authentication in Critical Function in Bosch IP cameras allows an unauthenticated remote attacker to extract sensitive information or change settings of the camera by sending crafted requests to the device. The vulnerability affects devices of the CPP6, CPP7, and CPP7.3 family.

Name of the Vulnerable Software and Affected Versions: Bosch IP cameras (affected versions not specified) Description: The issue is related to improper validation of the HTTP header in Bosch IP cameras, which allows an attacker to inject arbitrary HTTP headers through crafted URLs. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Bosch IP cameras (affected versions not specified) Description: The issue allows an authenticated attacker with administrator rights to cause a Denial of Service (DoS) by calling a URL with an invalid parameter, making the camera unresponsive for a few seconds. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to the use of Telnet for network device management, which does not support encryption of client-server communications. This makes the devices vulnerable to Man-in-the-Middle attacks. The vulnerability is associated with a lack of protection for transmitted data, allowing a remote attacker to gain unauthorized access to protected information through a Telnet connection.

The issue is related to inadequate access control in the NPort IA5150A/IA5250A Series, allowing a user with "Read Only" privilege level to send requests via the web console to change the device's configuration. This can be exploited by a remote attacker to bypass existing security restrictions and elevate their privileges.

The issue is related to the storage of passwords in plaintext. This could allow a remote attacker to gain unauthorized access to sensitive information. The export of a device's configuration may contain user passwords and other sensitive data in their original form if a pre-shared key is not set.

The issue is related to the cleartext transmission of sensitive information via Moxa Service in the affected devices. This could allow attackers to read authentication data, device configuration, and other sensitive data transmitted over Moxa Service. Exploitation of the vulnerability may enable remote attackers to gain unauthorized access to protected information.

The issue is related to the use of insufficiently random values.

The issue is related to improper communication address filtering.

The issue concerns sensitive information being stored in clear text.

The issue concerns user enumeration in the affected software.

The issue concerns a user privilege escalation in the software, which could potentially allow unauthorized access to sensitive features or data.

The issue is related to Privilege Escalation via Broken Access Control.

The issue is related to password management in the affected software.

The issue concerns Hidden Token Access in the affected software.

The issue concerns Remote Code Execution in the specified software, allowing for potential malicious code execution.

The issue allows remote attackers to gain privileged access to the router due to default credentials.