Read the docs
TI-2018-13491 Aliases CVE-2018-19036GHSA-mf48-4p29-w2j4

An issue was discovered in several Bosch IP cameras for firmware versions 6.32 and higher.

Priority MEDIUM 47CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.

Summary

An issue was discovered in several Bosch IP cameras for firmware versions 6.32 and higher. A malicious client could potentially succeed in the unauthorized execution of code on the device via the network interface.

Why it matters now

EPSS 0.02408 84th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 74

CPEVersionsRoleVendor
cpe:2.3:o:bosch:common_product_platform_4_firmware:*:*:*:*:*:*:*:*6.32VulnerableBosch
cpe:2.3:h:bosch:autodome_ip_4000_hd:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:autodome_ip_5000_hd:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:autodome_ip_5000_ir:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:autodome_ip_7000:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:dinion_hd_1080p:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:dinion_hd_1080p_hdr:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:dinion_hd_720p:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:dinion_imager_9000_hd:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:dinion_ip_4000_hd:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
  • cpe:2.3:o:bosch:common_product_platform_4_firmware:*:*:*:*:*:*:*:* Versions 6.32 Vulnerable ·Bosch
  • cpe:2.3:h:bosch:autodome_ip_4000_hd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:autodome_ip_5000_hd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:autodome_ip_5000_ir:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:autodome_ip_7000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:dinion_hd_1080p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:dinion_hd_1080p_hdr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:dinion_hd_720p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:dinion_imager_9000_hd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:dinion_ip_4000_hd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
Show 64 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:bosch:dinion_ip_5000_hd:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:dinion_ip_5000_mp:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:dinion_ip_bullet_4000:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:dinion_ip_bullet_5000:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:dinion_ip_starlight_7000_hd:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:extegra_ip_dynamic_9000:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:extegra_ip_starlight_9000:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:flexidome_corner_9000_mp:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:flexidome_hd_1080p:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:flexidome_hd_1080p_hdr:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:flexidome_hd_720p:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:flexidome_ip_indoor_4000_hd:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:flexidome_ip_indoor_4000_ir:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:flexidome_ip_indoor_5000_hd:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:flexidome_ip_indoor_5000_mp:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:flexidome_ip_micro_2000_hd:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:flexidome_ip_micro_2000_ip:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:flexidome_ip_micro_5000_hd:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:flexidome_ip_micro_5000_mp:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:flexidome_ip_outdoor_4000_hd:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:flexidome_ip_outdoor_4000_ir:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:flexidome_ip_outdoor_5000_hd:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:flexidome_ip_outdoor_5000_mp:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:flexidome_ip_panormic_5000:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:ip_2000:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:ip_2000_hd:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:ip_bullet_4000_hd:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:ip_bullet_5000_hd:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:mic_ip_dynamic_7000:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:mic_ip_starlight_7000:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:tinyon_ip_2000:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:vandal-proof_flexidome_hd_1080p:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:vandal-proof_flexidome_hd_1080p_hdr:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:vandal-proof_flexidome_hd_720p:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:o:bosch:common_product_platform_6_firmware:*:*:*:*:*:*:*:*6.32VulnerableBosch
cpe:2.3:h:bosch:aviotec_ip_starlight_8000:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:dinion_ip_starlight_8000_12mp:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:dinion_ip_ultra_8000_12mp:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:flexidome_ip_panoramic_6000_12mp_180:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:flexidome_ip_panoramic_6000_12mp_180_iva:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:flexidome_ip_panoramic_6000_12mp_360:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:flexidome_ip_panoramic_6000_12mp_360_iva:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:flexidome_ip_panoramic_7000_12mp_180:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:flexidome_ip_panoramic_7000_12mp_180_iva:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:flexidome_ip_panoramic_7000_12mp_360:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:flexidome_ip_panoramic_7000_12mp_360_iva:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:o:bosch:common_product_platform_7_firmware:*:*:*:*:*:*:*:*6.32VulnerableBosch
cpe:2.3:h:bosch:dinion_ip_starlight_6000:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:dinion_ip_starlight_7000:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:dinion_ip_thermal_8000:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:flexidome_ip_starlight_6000:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:flexidome_ip_starlight_7000:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:o:bosch:common_product_platform_7.3_firmware:*:*:*:*:*:*:*:*6.32VulnerableBosch
cpe:2.3:h:bosch:autodome_ip_4000i:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:autodome_ip_5000i:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:autodome_ip_starlight_5000i:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:autodome_ip_starlight_7000i:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:dinion_ip_bullet_4000i:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:dinion_ip_bullet_5000i:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:dinion_ip_bullet_6000i:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:flexidome_ip_4000i:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:flexidome_ip_5000i:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:mic_ip_fusion_9000i:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:h:bosch:mic_ip_starlight_7000i:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
  • cpe:2.3:h:bosch:dinion_ip_5000_hd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:dinion_ip_5000_mp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:dinion_ip_bullet_4000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:dinion_ip_bullet_5000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:dinion_ip_starlight_7000_hd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:extegra_ip_dynamic_9000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:extegra_ip_starlight_9000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:flexidome_corner_9000_mp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:flexidome_hd_1080p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:flexidome_hd_1080p_hdr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:flexidome_hd_720p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:flexidome_ip_indoor_4000_hd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:flexidome_ip_indoor_4000_ir:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:flexidome_ip_indoor_5000_hd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:flexidome_ip_indoor_5000_mp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:flexidome_ip_micro_2000_hd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:flexidome_ip_micro_2000_ip:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:flexidome_ip_micro_5000_hd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:flexidome_ip_micro_5000_mp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:flexidome_ip_outdoor_4000_hd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:flexidome_ip_outdoor_4000_ir:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:flexidome_ip_outdoor_5000_hd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:flexidome_ip_outdoor_5000_mp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:flexidome_ip_panormic_5000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:ip_2000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:ip_2000_hd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:ip_bullet_4000_hd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:ip_bullet_5000_hd:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:mic_ip_dynamic_7000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:mic_ip_starlight_7000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:tinyon_ip_2000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:vandal-proof_flexidome_hd_1080p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:vandal-proof_flexidome_hd_1080p_hdr:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:vandal-proof_flexidome_hd_720p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:o:bosch:common_product_platform_6_firmware:*:*:*:*:*:*:*:* Versions 6.32 Vulnerable ·Bosch
  • cpe:2.3:h:bosch:aviotec_ip_starlight_8000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:dinion_ip_starlight_8000_12mp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:dinion_ip_ultra_8000_12mp:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:flexidome_ip_panoramic_6000_12mp_180:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:flexidome_ip_panoramic_6000_12mp_180_iva:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:flexidome_ip_panoramic_6000_12mp_360:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:flexidome_ip_panoramic_6000_12mp_360_iva:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:flexidome_ip_panoramic_7000_12mp_180:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:flexidome_ip_panoramic_7000_12mp_180_iva:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:flexidome_ip_panoramic_7000_12mp_360:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:flexidome_ip_panoramic_7000_12mp_360_iva:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:o:bosch:common_product_platform_7_firmware:*:*:*:*:*:*:*:* Versions 6.32 Vulnerable ·Bosch
  • cpe:2.3:h:bosch:dinion_ip_starlight_6000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:dinion_ip_starlight_7000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:dinion_ip_thermal_8000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:flexidome_ip_starlight_6000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:flexidome_ip_starlight_7000:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:o:bosch:common_product_platform_7.3_firmware:*:*:*:*:*:*:*:* Versions 6.32 Vulnerable ·Bosch
  • cpe:2.3:h:bosch:autodome_ip_4000i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:autodome_ip_5000i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:autodome_ip_starlight_5000i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:autodome_ip_starlight_7000i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:dinion_ip_bullet_4000i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:dinion_ip_bullet_5000i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:dinion_ip_bullet_6000i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:flexidome_ip_4000i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:flexidome_ip_5000i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:mic_ip_fusion_9000i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:h:bosch:mic_ip_starlight_7000i:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2018-19036
  2. 2026-10-03 Alias added: GHSA-mf48-4p29-w2j4

References

Sources