CVE-2021-23847

Name of the Vulnerable Software and Affected Versions Bosch IP cameras versions 7.70 through 7.80 prior to B128

Description A Missing Authentication in Critical Function in Bosch IP cameras allows an unauthenticated remote attacker to extract sensitive information or change settings of the camera by sending crafted requests to the device. The vulnerability affects devices of the CPP6, CPP7, and CPP7.3 family.

Recommendations For versions 7.70 through 7.80 prior to B128, update the firmware to a version that includes the fix for this issue, specifically B128 or later. As a temporary workaround, consider restricting access to the device to minimize the risk of exploitation.