Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.2

A specially crafted TCP/IP packet may cause the camera recovery image web interface to crash. It may also cause a buffer overflow which could enable remote code execution. The recovery image can on...

CVE-2021-23851 · published 4 years ago
Summary

A specially crafted TCP/IP packet may cause the camera recovery image web interface to crash. It may also cause a buffer overflow which could enable remote code execution. The recovery image can only be booted with administrative rights or with physical access to the camera and allows the upload of ...

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
bosch autodome_ip_4000i_firmware cpp7.3
cpe:2.3:o:bosch:autodome_ip_4000i_firmware:cpp7.3:*:*:*:*:*:*:*
bosch autodome_ip_5000i_firmware cpp7.3
cpe:2.3:o:bosch:autodome_ip_5000i_firmware:cpp7.3:*:*:*:*:*:*:*
bosch autodome_ip_starlight_5000i_firmware cpp7.3
cpe:2.3:o:bosch:autodome_ip_starlight_5000i_firmware:cpp7.3:*:*:*:*:*:*:*
bosch autodome_ip_starlight_7000i_firmware cpp7.3
cpe:2.3:o:bosch:autodome_ip_starlight_7000i_firmware:cpp7.3:*:*:*:*:*:*:*
bosch dinion_ip_3000i_firmware cpp7.3
cpe:2.3:o:bosch:dinion_ip_3000i_firmware:cpp7.3:*:*:*:*:*:*:*
bosch dinion_ip_bullet_4000i_firmware cpp7.3
cpe:2.3:o:bosch:dinion_ip_bullet_4000i_firmware:cpp7.3:*:*:*:*:*:*:*
bosch dinion_ip_bullet_5000_firmware cpp7.3
cpp4
cpe:2.3:o:bosch:dinion_ip_bullet_5000_firmware:cpp7.3:*:*:*:*:*:*:*
bosch dinion_ip_bullet_5000i_firmware cpp7.3
cpe:2.3:o:bosch:dinion_ip_bullet_5000i_firmware:cpp7.3:*:*:*:*:*:*:*
bosch dinion_ip_bullet_6000i_firmware cpp7.3
cpe:2.3:o:bosch:dinion_ip_bullet_6000i_firmware:cpp7.3:*:*:*:*:*:*:*
bosch flexidome_ip_3000i_firmware cpp7.3
cpe:2.3:o:bosch:flexidome_ip_3000i_firmware:cpp7.3:*:*:*:*:*:*:*
bosch flexidome_ip_4000i_firmware cpp7.3
cpe:2.3:o:bosch:flexidome_ip_4000i_firmware:cpp7.3:*:*:*:*:*:*:*
bosch flexidome_ip_5000i_firmware cpp7.3
cpe:2.3:o:bosch:flexidome_ip_5000i_firmware:cpp7.3:*:*:*:*:*:*:*
bosch flexidome_ip_starlight_5000i_firmware cpp7.3
cpe:2.3:o:bosch:flexidome_ip_starlight_5000i_firmware:cpp7.3:*:*:*:*:*:*:*
bosch flexidome_ip_starlight_8000i_firmware cpp7.3
cpe:2.3:o:bosch:flexidome_ip_starlight_8000i_firmware:cpp7.3:*:*:*:*:*:*:*
bosch mic_ip_starlight_7000i_firmware cpp7.3
cpe:2.3:o:bosch:mic_ip_starlight_7000i_firmware:cpp7.3:*:*:*:*:*:*:*
bosch mic_ip_starlight_7100i_firmware cpp7.3
cpe:2.3:o:bosch:mic_ip_starlight_7100i_firmware:cpp7.3:*:*:*:*:*:*:*
bosch mic_ip_ultra_7100i_firmware cpp7.3
cpe:2.3:o:bosch:mic_ip_ultra_7100i_firmware:cpp7.3:*:*:*:*:*:*:*
bosch mic_ip_fusion_9000i_firmware cpp7.3
cpe:2.3:o:bosch:mic_ip_fusion_9000i_firmware:cpp7.3:*:*:*:*:*:*:*
bosch dinion_ip_starlight_6000_firmware cpp7
cpe:2.3:o:bosch:dinion_ip_starlight_6000_firmware:cpp7:*:*:*:*:*:*:*
bosch dinion_ip_starlight_7000_firmware cpp7
cpe:2.3:o:bosch:dinion_ip_starlight_7000_firmware:cpp7:*:*:*:*:*:*:*
bosch dinion_ip_thermal_8000_firmware cpp7
cpe:2.3:o:bosch:dinion_ip_thermal_8000_firmware:cpp7:*:*:*:*:*:*:*
bosch flexidome_ip_starlight_6000_firmware cpp7
cpe:2.3:o:bosch:flexidome_ip_starlight_6000_firmware:cpp7:*:*:*:*:*:*:*
bosch flexidome_ip_starlight_7000_firmware cpp7
cpe:2.3:o:bosch:flexidome_ip_starlight_7000_firmware:cpp7:*:*:*:*:*:*:*
bosch dinion_ip_thermal_9000_rm_firmware cpp7
cpe:2.3:o:bosch:dinion_ip_thermal_9000_rm_firmware:cpp7:*:*:*:*:*:*:*
bosch aviotec_ip_starlight_8000_firmware cpp6
cpe:2.3:o:bosch:aviotec_ip_starlight_8000_firmware:cpp6:*:*:*:*:*:*:*
bosch dinion_ip_starlight_8000_firmware cpp6
cpe:2.3:o:bosch:dinion_ip_starlight_8000_firmware:cpp6:*:*:*:*:*:*:*
bosch dinion_ip_ultra_8000_firmware cpp6
cpe:2.3:o:bosch:dinion_ip_ultra_8000_firmware:cpp6:*:*:*:*:*:*:*
bosch flexidome_ip_panoramic_6000_firmware cpp6
cpe:2.3:o:bosch:flexidome_ip_panoramic_6000_firmware:cpp6:*:*:*:*:*:*:*
bosch flexidome_ip_panoramic_7000_firmware cpp6
cpe:2.3:o:bosch:flexidome_ip_panoramic_7000_firmware:cpp6:*:*:*:*:*:*:*
bosch autodome_ip_4000_hd_firmware cpp4
cpe:2.3:o:bosch:autodome_ip_4000_hd_firmware:cpp4:*:*:*:*:*:*:*
bosch autodome_ip_5000_hd_firmware cpp4
cpe:2.3:o:bosch:autodome_ip_5000_hd_firmware:cpp4:*:*:*:*:*:*:*
bosch autodome_ip_5000_ir_firmware cpp4
cpe:2.3:o:bosch:autodome_ip_5000_ir_firmware:cpp4:*:*:*:*:*:*:*
bosch autodome_7000_firmware cpp4
cpe:2.3:o:bosch:autodome_7000_firmware:cpp4:*:*:*:*:*:*:*
bosch dinion_hd_1080p_firmware cpp4
cpe:2.3:o:bosch:dinion_hd_1080p_firmware:cpp4:*:*:*:*:*:*:*
bosch dinion_hd_1080p_hdr_firmware cpp4
cpe:2.3:o:bosch:dinion_hd_1080p_hdr_firmware:cpp4:*:*:*:*:*:*:*
bosch dinion_hd_720p_firmware cpp4
cpe:2.3:o:bosch:dinion_hd_720p_firmware:cpp4:*:*:*:*:*:*:*
bosch dinion_imager_9000_hd_firmware cpp4
cpe:2.3:o:bosch:dinion_imager_9000_hd_firmware:cpp4:*:*:*:*:*:*:*
bosch dinion_ip_bullet_4000_firmware cpp4
cpe:2.3:o:bosch:dinion_ip_bullet_4000_firmware:cpp4:*:*:*:*:*:*:*
bosch dinion_ip_4000_hd_firmware cpp4
cpe:2.3:o:bosch:dinion_ip_4000_hd_firmware:cpp4:*:*:*:*:*:*:*
bosch dinion_ip_5000_hd_firmware cpp4
cpe:2.3:o:bosch:dinion_ip_5000_hd_firmware:cpp4:*:*:*:*:*:*:*
bosch dinion_ip_5000_mp_firmware cpp4
cpe:2.3:o:bosch:dinion_ip_5000_mp_firmware:cpp4:*:*:*:*:*:*:*
bosch dinion_ip_starlight_7000_hd_firmware cpp4
cpe:2.3:o:bosch:dinion_ip_starlight_7000_hd_firmware:cpp4:*:*:*:*:*:*:*
bosch flexidome_corner_9000_mp_firmware cpp4
cpe:2.3:o:bosch:flexidome_corner_9000_mp_firmware:cpp4:*:*:*:*:*:*:*
bosch flexidome_hd_1080p_firmware cpp4
cpe:2.3:o:bosch:flexidome_hd_1080p_firmware:cpp4:*:*:*:*:*:*:*
bosch flexidome_hd_1080p_hdr_firmware cpp4
cpe:2.3:o:bosch:flexidome_hd_1080p_hdr_firmware:cpp4:*:*:*:*:*:*:*
bosch flexidome_hd_720p_firmware cpp4
cpe:2.3:o:bosch:flexidome_hd_720p_firmware:cpp4:*:*:*:*:*:*:*
bosch vandal-proof_flexidome_hd_1080p_firmware cpp4
cpe:2.3:o:bosch:vandal-proof_flexidome_hd_1080p_firmware:cpp4:*:*:*:*:*:*:*
bosch vandal-proof_flexidome_hd_1080p_hdr_firmware cpp4
cpe:2.3:o:bosch:vandal-proof_flexidome_hd_1080p_hdr_firmware:cpp4:*:*:*:*:*:*:*
bosch vandal-proof_flexidome_hd_720p_firmware cpp4
cpe:2.3:o:bosch:vandal-proof_flexidome_hd_720p_firmware:cpp4:*:*:*:*:*:*:*
bosch flexidome_ip_micro_2000_hd_firmware cpp4
cpe:2.3:o:bosch:flexidome_ip_micro_2000_hd_firmware:cpp4:*:*:*:*:*:*:*
Showing 50 of 68. Show the rest
VendorProductAffected versions
bosch flexidome_ip_micro_2000_ip_firmware cpp4
cpe:2.3:o:bosch:flexidome_ip_micro_2000_ip_firmware:cpp4:*:*:*:*:*:*:*
bosch flexidome_ip_indoor_4000_hd_firmware cpp4
cpe:2.3:o:bosch:flexidome_ip_indoor_4000_hd_firmware:cpp4:*:*:*:*:*:*:*
bosch flexidome_ip_indoor_4000_ir_firmware cpp4
cpe:2.3:o:bosch:flexidome_ip_indoor_4000_ir_firmware:cpp4:*:*:*:*:*:*:*
bosch flexidome_ip_outdoor_4000_hd_firmware cpp4
cpe:2.3:o:bosch:flexidome_ip_outdoor_4000_hd_firmware:cpp4:*:*:*:*:*:*:*
bosch flexidome_ip_outdoor_4000_ir_firmware cpp4
cpe:2.3:o:bosch:flexidome_ip_outdoor_4000_ir_firmware:cpp4:*:*:*:*:*:*:*
bosch flexidome_ip_indoor_5000_hd_firmware cpp4
cpe:2.3:o:bosch:flexidome_ip_indoor_5000_hd_firmware:cpp4:*:*:*:*:*:*:*
bosch flexidome_ip_indoor_5000_mp_firmware cpp4
cpe:2.3:o:bosch:flexidome_ip_indoor_5000_mp_firmware:cpp4:*:*:*:*:*:*:*
bosch flexidome_ip_micro_5000_mp_firmware cpp4
cpe:2.3:o:bosch:flexidome_ip_micro_5000_mp_firmware:cpp4:*:*:*:*:*:*:*
bosch flexidome_ip_outdoor_5000_hd_firmware cpp4
cpe:2.3:o:bosch:flexidome_ip_outdoor_5000_hd_firmware:cpp4:*:*:*:*:*:*:*
bosch flexidome_ip_outdoor_5000_mp_firmware cpp4
cpe:2.3:o:bosch:flexidome_ip_outdoor_5000_mp_firmware:cpp4:*:*:*:*:*:*:*
bosch flexidome_ip_panoramic_5000_firmware cpp4
cpe:2.3:o:bosch:flexidome_ip_panoramic_5000_firmware:cpp4:*:*:*:*:*:*:*
bosch ip_bullet_4000_hd_firmware cpp4
cpe:2.3:o:bosch:ip_bullet_4000_hd_firmware:cpp4:*:*:*:*:*:*:*
bosch ip_bullet_5000_hd_firmware cpp4
cpe:2.3:o:bosch:ip_bullet_5000_hd_firmware:cpp4:*:*:*:*:*:*:*
bosch ip_micro_2000_firmware cpp4
cpe:2.3:o:bosch:ip_micro_2000_firmware:cpp4:*:*:*:*:*:*:*
bosch ip_micro_2000_hd_firmware cpp4
cpe:2.3:o:bosch:ip_micro_2000_hd_firmware:cpp4:*:*:*:*:*:*:*
bosch mic_ip_dynamic_7000_firmware cpp4
cpe:2.3:o:bosch:mic_ip_dynamic_7000_firmware:cpp4:*:*:*:*:*:*:*
bosch mic_ip_starlight_7000_firmware cpp4
cpe:2.3:o:bosch:mic_ip_starlight_7000_firmware:cpp4:*:*:*:*:*:*:*
bosch tinyon_ip_2000_firmware cpp4
cpe:2.3:o:bosch:tinyon_ip_2000_firmware:cpp4:*:*:*:*:*:*:*
Original advisory text
A specially crafted TCP/IP packet may cause the camera recovery image web interface to crash. It may also cause a buffer overflow which could enable remote code execution. The recovery image can on...
A specially crafted TCP/IP packet may cause the camera recovery image web interface to crash. It may also cause a buffer overflow which could enable remote code execution. The recovery image can only be booted with administrative rights or with physical access to the camera and allows the upload of a new firmware in case of a damaged firmware.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
7.2 High
Exploitation
2% chance of attack within 30 days
Type
CWE-121Stack-based Buffer Overflow
CWE-120Classic Buffer Overflow
Timeline
Published30 Mar 2022
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2021-23851 · NVD
Track software like this
Free during beta