Read the docs
TI-2021-06210 Aliases CVE-2021-23847GHSA-222p-ppph-c5v8

Unauthenticated Information Extraction Vulnerability

Priority MEDIUM 45CWE-287Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-287.

Summary

A Missing Authentication in Critical Function in Bosch IP cameras allows an unauthenticated remote attacker to extract sensitive information or change settings of the camera by sending crafted requests to the device. Only devices of the CPP6, CPP7 and CPP7.3 family with firmware 7.70, 7.72, and 7.80 prior to B128 are affected by this vulnerability. Versions 7.62 or lower and INTEOX cameras are not affected.

Why it matters now

EPSS 0.01445 73rd percentileScored 2026-11-07
Fix Fixed CPP Firmware (Bosch): 7.80 B128

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
BoschCPP Firmware7.70; 7.72; before 7.80 B1287.80 B128Patch availableCNA
  • CPP Firmware VendorBosch Affected 7.70; 7.72; before 7.80 B128 Fixed in 7.80 B128 Patch available CNA

CPE configurations NVD · 12

CPEVersionsRoleVendor
cpe:2.3:o:bosch:cpp6_firmware:*:*:*:*:*:*:*:*7.80 to before 7.80.0129VulnerableBosch
cpe:2.3:o:bosch:cpp6_firmware:7.70:*:*:*:*:*:*:*7.70VulnerableBosch
cpe:2.3:o:bosch:cpp6_firmware:7.72:*:*:*:*:*:*:*7.72VulnerableBosch
cpe:2.3:h:bosch:cpp6:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:o:bosch:cpp7_firmware:*:*:*:*:*:*:*:*7.80 to before 7.80.0129VulnerableBosch
cpe:2.3:o:bosch:cpp7_firmware:7.70:*:*:*:*:*:*:*7.70VulnerableBosch
cpe:2.3:o:bosch:cpp7_firmware:7.72:*:*:*:*:*:*:*7.72VulnerableBosch
cpe:2.3:h:bosch:cpp7:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
cpe:2.3:o:bosch:cpp7.3_firmware:*:*:*:*:*:*:*:*7.80 to before 7.80.0129VulnerableBosch
cpe:2.3:o:bosch:cpp7.3_firmware:7.70:*:*:*:*:*:*:*7.70VulnerableBosch
  • cpe:2.3:o:bosch:cpp6_firmware:*:*:*:*:*:*:*:* Versions 7.80 to before 7.80.0129 Vulnerable ·Bosch
  • cpe:2.3:o:bosch:cpp6_firmware:7.70:*:*:*:*:*:*:* Versions 7.70 Vulnerable ·Bosch
  • cpe:2.3:o:bosch:cpp6_firmware:7.72:*:*:*:*:*:*:* Versions 7.72 Vulnerable ·Bosch
  • cpe:2.3:h:bosch:cpp6:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:o:bosch:cpp7_firmware:*:*:*:*:*:*:*:* Versions 7.80 to before 7.80.0129 Vulnerable ·Bosch
  • cpe:2.3:o:bosch:cpp7_firmware:7.70:*:*:*:*:*:*:* Versions 7.70 Vulnerable ·Bosch
  • cpe:2.3:o:bosch:cpp7_firmware:7.72:*:*:*:*:*:*:* Versions 7.72 Vulnerable ·Bosch
  • cpe:2.3:h:bosch:cpp7:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch
  • cpe:2.3:o:bosch:cpp7.3_firmware:*:*:*:*:*:*:*:* Versions 7.80 to before 7.80.0129 Vulnerable ·Bosch
  • cpe:2.3:o:bosch:cpp7.3_firmware:7.70:*:*:*:*:*:*:* Versions 7.70 Vulnerable ·Bosch
Show 2 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:bosch:cpp7.3_firmware:7.72:*:*:*:*:*:*:*7.72VulnerableBosch
cpe:2.3:h:bosch:cpp7.3:-:*:*:*:*:*:*:*not specified by NVDRunning onBosch
  • cpe:2.3:o:bosch:cpp7.3_firmware:7.72:*:*:*:*:*:*:* Versions 7.72 Vulnerable ·Bosch
  • cpe:2.3:h:bosch:cpp7.3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Bosch

Remediation

  • Fix · CNA CPP Firmware (Bosch) Fixed in 7.80 B128

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-23847
  2. 2026-10-03 Alias added: GHSA-222p-ppph-c5v8

References

Advisory 1

  • TI-2021-06216 Improper Input Validation of HTTP Headers CVSS 3.1CRITICAL 9.8
  • TI-2021-06212 Cross Site Request Forgery (CSRF) vulnerability in web based management interface CVSS 3.1HIGH 8.8
  • TI-2021-06217 Reflected XSS in page parameter CVSS 3.1HIGH 8.3
  • TI-2021-06211 Reflected XSS in URL handler CVSS 3.1HIGH 8.3
  • TI-2022-20071 Improper access control in Bosch Camera Firmware CVSS 3.1MEDIUM 5.3
  • TI-2021-06215 Denial of Service (DoS) due to invalid web parameter CVSS 3.1MEDIUM 4.9

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences