← Back

CVE-2018-20299

nvd nist
Published: Dec 19, 2018Modified: Nov 21, 2024

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

An issue was discovered in several Bosch Smart Home cameras (360 degree indoor camera and Eyes outdoor camera) with firmware before 6.52.4. A malicious client could potentially succeed in the unauthorized execution of code on the device via the network interface, because there is a buffer overflow in the RCP+ parser of the web server.

Affected (2)

Bosch
2 products
360 Indoor Camera Firmware
Eyes Outdoor Camera Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
360 Indoor Camera Firmware
Before 6.52.4
Running on/withPlatform Versions
Bosch
360 Indoor Camera
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Eyes Outdoor Camera Firmware
Before 6.52.4
Running on/withPlatform Versions
Bosch
Eyes Outdoor Camera
All versions

Related CWEs

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (2)

Source: cve@mitre.org
MitigationVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
MitigationVendor Advisory

Timeline

No history available yet.