CVE-2021-23850

Published: Mar 30, 2022Modified: Jun 17, 2026

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: NVD

Description

A specially crafted TCP/IP packet may cause a camera recovery image telnet interface to crash. It may also cause a buffer overflow which could enable remote code execution. The recovery image can only be booted with administrative rights or with physical access to the camera and allows the upload of a new firmware in case of a damaged firmware.

Affected (69)

Bosch

68 products

Autodome Ip 4000i Firmware

Autodome Ip 5000i Firmware

Autodome Ip Starlight 5000i Firmware

Autodome Ip Starlight 7000i Firmware

Dinion Ip 3000i Firmware

Dinion Ip Bullet 4000i Firmware

Dinion Ip Bullet 5000 Firmware

Dinion Ip Bullet 5000i Firmware

Dinion Ip Bullet 6000i Firmware

Flexidome Ip 3000i Firmware

Flexidome Ip 4000i Firmware

Flexidome Ip 5000i Firmware

Flexidome Ip Starlight 5000i Firmware

Flexidome Ip Starlight 8000i Firmware

Mic Ip Starlight 7000i Firmware

Mic Ip Starlight 7100i Firmware

Mic Ip Ultra 7100i Firmware

Mic Ip Fusion 9000i Firmware

Dinion Ip Starlight 6000 Firmware

Dinion Ip Starlight 7000 Firmware

Dinion Ip Thermal 8000 Firmware

Flexidome Ip Starlight 6000 Firmware

Flexidome Ip Starlight 7000 Firmware

Dinion Ip Thermal 9000 Rm Firmware

Aviotec Ip Starlight 8000 Firmware

Dinion Ip Starlight 8000 Firmware

Dinion Ip Ultra 8000 Firmware

Flexidome Ip Panoramic 6000 Firmware

Flexidome Ip Panoramic 7000 Firmware

Autodome Ip 4000 Hd Firmware

Autodome Ip 5000 Hd Firmware

Autodome Ip 5000 Ir Firmware

Autodome 7000 Firmware

Dinion Hd 1080p Firmware

Dinion Hd 1080p Hdr Firmware

Dinion Hd 720p Firmware

Dinion Imager 9000 Hd Firmware

Dinion Ip Bullet 4000 Firmware

Dinion Ip 4000 Hd Firmware

Dinion Ip 5000 Hd Firmware

Dinion Ip 5000 Mp Firmware

Dinion Ip Starlight 7000 Hd Firmware

Flexidome Corner 9000 Mp Firmware

Flexidome Hd 1080p Firmware

Flexidome Hd 1080p Hdr Firmware

Flexidome Hd 720p Firmware

Vandal Proof Flexidome Hd 1080p Firmware

Vandal Proof Flexidome Hd 1080p Hdr Firmware

Vandal Proof Flexidome Hd 720p Firmware

Flexidome Ip Micro 2000 Hd Firmware

Flexidome Ip Micro 2000 Ip Firmware

Flexidome Ip Indoor 4000 Hd Firmware

Flexidome Ip Indoor 4000 Ir Firmware

Flexidome Ip Outdoor 4000 Hd Firmware

Flexidome Ip Outdoor 4000 Ir Firmware

Flexidome Ip Indoor 5000 Hd Firmware

Flexidome Ip Indoor 5000 Mp Firmware

Flexidome Ip Micro 5000 Mp Firmware

Flexidome Ip Outdoor 5000 Hd Firmware

Flexidome Ip Outdoor 5000 Mp Firmware

Flexidome Ip Panoramic 5000 Firmware

Ip Bullet 4000 Hd Firmware

Ip Bullet 5000 Hd Firmware

Ip Micro 2000 Firmware

Ip Micro 2000 Hd Firmware

Mic Ip Dynamic 7000 Firmware

Mic Ip Starlight 7000 Firmware

Tinyon Ip 2000 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Autodome Ip 4000i Firmware	Version cpp7.3

Running on/with	Platform Versions
Bosch Autodome Ip 4000i	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Autodome Ip 5000i Firmware	Version cpp7.3

Running on/with	Platform Versions
Bosch Autodome Ip 5000i	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Autodome Ip Starlight 5000i Firmware	Version cpp7.3

Running on/with	Platform Versions
Bosch Autodome Ip Starlight 5000i	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Autodome Ip Starlight 7000i Firmware	Version cpp7.3

Running on/with	Platform Versions
Bosch Autodome Ip Starlight 7000i	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Dinion Ip 3000i Firmware	Version cpp7.3

Running on/with	Platform Versions
Bosch Dinion Ip 3000i	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Dinion Ip Bullet 4000i Firmware	Version cpp7.3

Running on/with	Platform Versions
Bosch Dinion Ip Bullet 4000i	All versions

Configuration G

1 vulnerable

Vulnerable Software	Affected Versions
Bosch Dinion Ip Bullet 5000 Firmware	Version cpp7.3

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Dinion Ip Bullet 5000i Firmware	Version cpp7.3

Running on/with	Platform Versions
Bosch Dinion Ip Bullet 5000i	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Dinion Ip Bullet 6000i Firmware	Version cpp7.3

Running on/with	Platform Versions
Bosch Dinion Ip Bullet 6000i	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Flexidome Ip 3000i Firmware	Version cpp7.3

Running on/with	Platform Versions
Bosch Flexidome Ip 3000i	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Flexidome Ip 4000i Firmware	Version cpp7.3

Running on/with	Platform Versions
Bosch Flexidome Ip 4000i	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Flexidome Ip 5000i Firmware	Version cpp7.3

Running on/with	Platform Versions
Bosch Flexidome Ip 5000i	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Flexidome Ip Starlight 5000i Firmware	Version cpp7.3

Running on/with	Platform Versions
Bosch Flexidome Ip Starlight 5000i	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Flexidome Ip Starlight 8000i Firmware	Version cpp7.3

Running on/with	Platform Versions
Bosch Flexidome Ip Starlight 8000i	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Mic Ip Starlight 7000i Firmware	Version cpp7.3

Running on/with	Platform Versions
Bosch Mic Ip Starlight 7000i	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Mic Ip Starlight 7100i Firmware	Version cpp7.3

Running on/with	Platform Versions
Bosch Mic Ip Starlight 7100i	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Mic Ip Ultra 7100i Firmware	Version cpp7.3

Running on/with	Platform Versions
Bosch Mic Ip Ultra 7100i	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Mic Ip Fusion 9000i Firmware	Version cpp7.3

Running on/with	Platform Versions
Bosch Mic Ip Fusion 9000i	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Dinion Ip Starlight 6000 Firmware	Version cpp7

Running on/with	Platform Versions
Bosch Dinion Ip Starlight 6000	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Dinion Ip Starlight 7000 Firmware	Version cpp7

Running on/with	Platform Versions
Bosch Dinion Ip Starlight 7000	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Dinion Ip Thermal 8000 Firmware	Version cpp7

Running on/with	Platform Versions
Bosch Dinion Ip Thermal 8000	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Flexidome Ip Starlight 6000 Firmware	Version cpp7

Running on/with	Platform Versions
Bosch Flexidome Ip Starlight 6000	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Flexidome Ip Starlight 7000 Firmware	Version cpp7

Running on/with	Platform Versions
Bosch Flexidome Ip Starlight 7000	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Dinion Ip Thermal 9000 Rm Firmware	Version cpp7

Running on/with	Platform Versions
Bosch Dinion Ip Thermal 9000 Rm	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Aviotec Ip Starlight 8000 Firmware	Version cpp6

Running on/with	Platform Versions
Bosch Aviotec Ip Starlight 8000	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Dinion Ip Starlight 8000 Firmware	Version cpp6

Running on/with	Platform Versions
Bosch Dinion Ip Starlight 8000	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Dinion Ip Ultra 8000 Firmware	Version cpp6

Running on/with	Platform Versions
Bosch Dinion Ip Ultra 8000	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Flexidome Ip Panoramic 6000 Firmware	Version cpp6

Running on/with	Platform Versions
Bosch Flexidome Ip Panoramic 6000	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Flexidome Ip Panoramic 7000 Firmware	Version cpp6

Running on/with	Platform Versions
Bosch Flexidome Ip Panoramic 7000	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Autodome Ip 4000 Hd Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Autodome Ip 4000 Hd	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Autodome Ip 5000 Hd Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Autodome Ip 5000 Hd	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Autodome Ip 5000 Ir Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Autodome Ip 5000 Ir	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Autodome 7000 Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Autodome 7000	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Dinion Hd 1080p Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Dinion Hd 1080p	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Dinion Hd 1080p Hdr Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Dinion Hd 1080p Hdr	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Dinion Hd 720p Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Dinion Hd 720p	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Dinion Imager 9000 Hd Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Dinion Imager 9000 Hd	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Dinion Ip Bullet 4000 Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Dinion Ip Bullet 4000	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Dinion Ip Bullet 5000 Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Dinion Ip Bullet 5000	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Dinion Ip 4000 Hd Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Dinion Ip 4000 Hd	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Dinion Ip 5000 Hd Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Dinion Ip 5000 Hd	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Dinion Ip 5000 Mp Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Dinion Ip 5000 Mp	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Dinion Ip Starlight 7000 Hd Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Dinion Ip Starlight 7000 Hd	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Flexidome Corner 9000 Mp Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Flexidome Corner 9000 Mp	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Flexidome Hd 1080p Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Flexidome Hd 1080p	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Flexidome Hd 1080p Hdr Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Flexidome Hd 1080p Hdr	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Flexidome Hd 720p Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Flexidome Hd 720p	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Vandal Proof Flexidome Hd 1080p Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Vandal Proof Flexidome Hd 1080p	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Vandal Proof Flexidome Hd 1080p Hdr Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Vandal Proof Flexidome Hd 1080p Hdr	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Vandal Proof Flexidome Hd 720p Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Vandal Proof Flexidome Hd 720p	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Flexidome Ip Micro 2000 Hd Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Flexidome Ip Micro 2000 Hd	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Flexidome Ip Micro 2000 Ip Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Flexidome Ip Micro 2000 Ip	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Flexidome Ip Indoor 4000 Hd Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Flexidome Ip Indoor 4000 Hd	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Flexidome Ip Indoor 4000 Ir Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Flexidome Ip Indoor 4000 Ir	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Flexidome Ip Outdoor 4000 Hd Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Flexidome Ip Outdoor 4000 Hd	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Flexidome Ip Outdoor 4000 Ir Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Flexidome Ip Outdoor 4000 Ir	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Flexidome Ip Indoor 5000 Hd Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Flexidome Ip Indoor 5000 Hd	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Flexidome Ip Indoor 5000 Mp Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Flexidome Ip Indoor 5000 Mp	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Flexidome Ip Micro 5000 Mp Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Flexidome Ip Micro 5000 Mp	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Flexidome Ip Outdoor 5000 Hd Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Flexidome Ip Outdoor 5000 Hd	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Flexidome Ip Outdoor 5000 Mp Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Flexidome Ip Outdoor 5000 Mp	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Flexidome Ip Panoramic 5000 Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Flexidome Ip Panoramic 5000	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Ip Bullet 4000 Hd Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Ip Bullet 4000 Hd	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Ip Bullet 5000 Hd Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Ip Bullet 5000 Hd	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Ip Micro 2000 Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Ip Micro 2000	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Ip Micro 2000 Hd Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Ip Micro 2000 Hd	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Mic Ip Dynamic 7000 Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Mic Ip Dynamic 7000	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Mic Ip Starlight 7000 Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Mic Ip Starlight 7000	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Bosch Tinyon Ip 2000 Firmware	Version cpp4

Running on/with	Platform Versions
Bosch Tinyon Ip 2000	All versions

Related CWEs

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.

CWE-121

Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

References (3)

https://psirt.bosch.com/security-advisories/bosch-sa-478243-bt.html

Source: psirt@bosch.com

Not ApplicableVendor Advisory

https://psirt.bosch.com/security-advisories/bosch-sa-446276-bt.html

Source: nvd@nist.gov

Vendor Advisory

https://psirt.bosch.com/security-advisories/bosch-sa-478243-bt.html

Source: af854a3a-2127-422b-91ae-364da2661108

Not ApplicableVendor Advisory

Timeline

No history available yet.