CVE-2021-23851: Bosch CPP Firmware, грешка в паметта

Описание

Оригинално описание

A specially crafted TCP/IP packet may cause the camera recovery image web interface to crash. It may also cause a buffer overflow which could enable remote code execution. The recovery image can only be booted with administrative rights or with physical access to the camera and allows the upload of a new firmware in case of a damaged firmware.

Засегнати продукти

• Bosch CPP Firmware: all

Вид слабост

• CWE-121 Препълване на буфера в стека

История

Други уязвимости в Bosch CPP Firmware

• 6.8CVE-2021-23850
• 7.5CVE-2021-23849
• 8.3CVE-2021-23854
• 9.8CVE-2021-23847
• 8.3CVE-2021-23853

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2021-23851
• https://nvd.nist.gov/vuln/detail/CVE-2021-23851
• https://psirt.bosch.com/security-advisories/bosch-sa-478243-bt.html