CVSS 3.1
7.2 highCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HCVE-2021-23850
High (7.2) in bosch. EPSS 1.6% chance of exploitation in the next 30 days.
A specially crafted TCP/IP packet may cause a camera recovery image telnet interface to crash. It may also cause a buffer overflow which could enable remote code execution. The recovery image can only be booted with administrative rights or with physical access to the camera and allows the upload of a new firmware in case of a damaged firmware.
Severity
- EPSS
- 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-120, CWE-121
- Published
- Modified
- Record from
- the NVD, synced
Affected
- bosch:autodome_7000_firmware
- bosch:autodome_ip_4000_hd_firmware
- bosch:autodome_ip_4000i_firmware
- bosch:autodome_ip_5000_hd_firmware
- bosch:autodome_ip_5000_ir_firmware
- bosch:autodome_ip_5000i_firmware
- bosch:autodome_ip_starlight_5000i_firmware
- bosch:autodome_ip_starlight_7000i_firmware
- bosch:aviotec_ip_starlight_8000_firmware
- bosch:dinion_hd_1080p_firmware
- bosch:dinion_hd_1080p_hdr_firmware
- bosch:dinion_hd_720p_firmware
- bosch:dinion_imager_9000_hd_firmware
- bosch:dinion_ip_3000i_firmware
- bosch:dinion_ip_4000_hd_firmware
- bosch:dinion_ip_5000_hd_firmware
- bosch:dinion_ip_5000_mp_firmware
- bosch:dinion_ip_bullet_4000_firmware
- bosch:dinion_ip_bullet_4000i_firmware
- bosch:dinion_ip_bullet_5000_firmware
- bosch:dinion_ip_bullet_5000i_firmware
- bosch:dinion_ip_bullet_6000i_firmware
- bosch:dinion_ip_starlight_6000_firmware
- bosch:dinion_ip_starlight_7000_firmware
- bosch:dinion_ip_starlight_7000_hd_firmware
- bosch:dinion_ip_starlight_8000_firmware
- bosch:dinion_ip_thermal_8000_firmware
- bosch:dinion_ip_thermal_9000_rm_firmware
- bosch:dinion_ip_ultra_8000_firmware
- bosch:flexidome_corner_9000_mp_firmware
- bosch:flexidome_hd_1080p_firmware
- bosch:flexidome_hd_1080p_hdr_firmware
- bosch:flexidome_hd_720p_firmware
- bosch:flexidome_ip_3000i_firmware
- bosch:flexidome_ip_4000i_firmware
- bosch:flexidome_ip_5000i_firmware
- bosch:flexidome_ip_indoor_4000_hd_firmware
- bosch:flexidome_ip_indoor_4000_ir_firmware
- bosch:flexidome_ip_indoor_5000_hd_firmware
- bosch:flexidome_ip_indoor_5000_mp_firmware
- bosch:flexidome_ip_micro_2000_hd_firmware
- bosch:flexidome_ip_micro_2000_ip_firmware
- bosch:flexidome_ip_micro_5000_mp_firmware
- bosch:flexidome_ip_outdoor_4000_hd_firmware
- bosch:flexidome_ip_outdoor_4000_ir_firmware
- bosch:flexidome_ip_outdoor_5000_hd_firmware
- bosch:flexidome_ip_outdoor_5000_mp_firmware
- bosch:flexidome_ip_panoramic_5000_firmware
- bosch:flexidome_ip_panoramic_6000_firmware
- bosch:flexidome_ip_panoramic_7000_firmware