CVE-2018-19036

Published: Dec 17, 2018Modified: Nov 21, 2024

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

An issue was discovered in several Bosch IP cameras for firmware versions 6.32 and higher. A malicious client could potentially succeed in the unauthorized execution of code on the device via the network interface.

Affected (4)

Products: Bosch: Common Product Platform 4 Firmware, Common Product Platform 6 Firmware, Common Product Platform 7 Firmware, Common Product Platform 7.3 Firmware

Bosch

4 products

Common Product Platform 4 Firmware

Common Product Platform 6 Firmware

Common Product Platform 7 Firmware

Common Product Platform 7.3 Firmware

Configuration A

1 vulnerable · 43 platform

Vulnerable Software	Affected Versions
Bosch Common Product Platform 4 Firmware	From 6.32

Running on/with	Platform Versions
Bosch Autodome Ip 4000 Hd	All versions
Bosch Autodome Ip 5000 Hd	All versions
Bosch Autodome Ip 5000 Ir	All versions
Bosch Autodome Ip 7000	All versions
Bosch Dinion Hd 1080p	All versions
Bosch Dinion Hd 1080p Hdr	All versions
Bosch Dinion Hd 720p	All versions
Bosch Dinion Imager 9000 Hd	All versions
Bosch Dinion Ip 4000 Hd	All versions
Bosch Dinion Ip 5000 Hd	All versions
Bosch Dinion Ip 5000 Mp	All versions
Bosch Dinion Ip Bullet 4000	All versions
Bosch Dinion Ip Bullet 5000	All versions
Bosch Dinion Ip Starlight 7000 Hd	All versions
Bosch Extegra Ip Dynamic 9000	All versions
Bosch Extegra Ip Starlight 9000	All versions
Bosch Flexidome Corner 9000 Mp	All versions
Bosch Flexidome Hd 1080p	All versions
Bosch Flexidome Hd 1080p Hdr	All versions
Bosch Flexidome Hd 720p	All versions
Bosch Flexidome Ip Indoor 4000 Hd	All versions
Bosch Flexidome Ip Indoor 4000 Ir	All versions
Bosch Flexidome Ip Indoor 5000 Hd	All versions
Bosch Flexidome Ip Indoor 5000 Mp	All versions
Bosch Flexidome Ip Micro 2000 Hd	All versions
Bosch Flexidome Ip Micro 2000 Ip	All versions
Bosch Flexidome Ip Micro 5000 Hd	All versions
Bosch Flexidome Ip Micro 5000 Mp	All versions
Bosch Flexidome Ip Outdoor 4000 Hd	All versions
Bosch Flexidome Ip Outdoor 4000 Ir	All versions
Bosch Flexidome Ip Outdoor 5000 Hd	All versions
Bosch Flexidome Ip Outdoor 5000 Mp	All versions
Bosch Flexidome Ip Panormic 5000	All versions
Bosch Ip 2000	All versions
Bosch Ip 2000 Hd	All versions
Bosch Ip Bullet 4000 Hd	All versions
Bosch Ip Bullet 5000 Hd	All versions
Bosch Mic Ip Dynamic 7000	All versions
Bosch Mic Ip Starlight 7000	All versions
Bosch Tinyon Ip 2000	All versions
Bosch Vandal Proof Flexidome Hd 1080p	All versions
Bosch Vandal Proof Flexidome Hd 1080p Hdr	All versions
Bosch Vandal Proof Flexidome Hd 720p	All versions

Configuration B

1 vulnerable · 11 platform

Vulnerable Software	Affected Versions
Bosch Common Product Platform 6 Firmware	From 6.32

Running on/with	Platform Versions
Bosch Aviotec Ip Starlight 8000	All versions
Bosch Dinion Ip Starlight 8000 12mp	All versions
Bosch Dinion Ip Ultra 8000 12mp	All versions
Bosch Flexidome Ip Panoramic 6000 12mp 180	All versions
Bosch Flexidome Ip Panoramic 6000 12mp 180 Iva	All versions
Bosch Flexidome Ip Panoramic 6000 12mp 360	All versions
Bosch Flexidome Ip Panoramic 6000 12mp 360 Iva	All versions
Bosch Flexidome Ip Panoramic 7000 12mp 180	All versions
Bosch Flexidome Ip Panoramic 7000 12mp 180 Iva	All versions
Bosch Flexidome Ip Panoramic 7000 12mp 360	All versions
Bosch Flexidome Ip Panoramic 7000 12mp 360 Iva	All versions

Configuration C

1 vulnerable · 5 platform

Vulnerable Software	Affected Versions
Bosch Common Product Platform 7 Firmware	From 6.32

Running on/with	Platform Versions
Bosch Dinion Ip Starlight 6000	All versions
Bosch Dinion Ip Starlight 7000	All versions
Bosch Dinion Ip Thermal 8000	All versions
Bosch Flexidome Ip Starlight 6000	All versions
Bosch Flexidome Ip Starlight 7000	All versions

Configuration D

1 vulnerable · 11 platform

Vulnerable Software	Affected Versions
Bosch Common Product Platform 7.3 Firmware	From 6.32

Running on/with	Platform Versions
Bosch Autodome Ip 4000i	All versions
Bosch Autodome Ip 5000i	All versions
Bosch Autodome Ip Starlight 5000i	All versions
Bosch Autodome Ip Starlight 7000i	All versions
Bosch Dinion Ip Bullet 4000i	All versions
Bosch Dinion Ip Bullet 5000i	All versions
Bosch Dinion Ip Bullet 6000i	All versions
Bosch Flexidome Ip 4000i	All versions
Bosch Flexidome Ip 5000i	All versions
Bosch Mic Ip Fusion 9000i	All versions
Bosch Mic Ip Starlight 7000i	All versions

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (2)

https://media.boschsecurity.com/fs/media/pb/security_advisories/bosch-2018-1202-bt-cve-2018-19036_security_advisory_ip_camera_vulnerability.pdf

Source: cve@mitre.org

MitigationPatchVendor Advisory

https://media.boschsecurity.com/fs/media/pb/security_advisories/bosch-2018-1202-bt-cve-2018-19036_security_advisory_ip_camera_vulnerability.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationPatchVendor Advisory

Timeline

No history available yet.