1. Home
  2. CVE Database
  3. CVE-2022-41677
MEDIUM · 5.3

CVE-2022-41677

An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information (like capabilities) about the device itself and network s...

Vulnerability Description

An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information (like capabilities) about the device itself and network settings of the device, disclosing possibly internal network settings if the device is connected to the internet.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
BoschCpp14 Firmware<= 8.80
BoschCpp14-
BoschCpp13 Firmware<= 8.48
BoschCpp13-
BoschCpp7.3 Firmware<= 7.86
BoschCpp7.3-
BoschCpp7 Firmware<= 7.86
BoschCpp7-
BoschCpp6 Firmware<= 7.86
BoschCpp6-
BoschCpp4 Firmware<= 7.10
BoschCpp4-

Related Weaknesses (CWE)

CWE-284

References

FAQ

What is CVE-2022-41677?

CVE-2022-41677 is a vulnerability with a CVSS score of 5.3 (MEDIUM). An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information (like capabilities) about the device itself and network s...

How severe is CVE-2022-41677?

CVE-2022-41677 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-41677?

Check the references section above for vendor advisories and patch information. Affected products include: Bosch Cpp14 Firmware, Bosch Cpp14, Bosch Cpp13 Firmware, Bosch Cpp13, Bosch Cpp7.3 Firmware.