PT-2018-15299 · Bosch · Bosch Smart Home Cameras

Published 2018-12-19 · Updated 2021-09-09 · CVE-2018-20299

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Bosch Smart Home cameras (360 degree indoor camera and Eyes outdoor camera) versions prior to 6.52.4

Description An issue was discovered in the RCP+ parser of the web server, which could allow a malicious client to execute code on the device via the network interface due to a buffer overflow.

Recommendations For versions prior to 6.52.4, update the firmware to version 6.52.4 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2018-20299

Affected Products

Bosch Smart Home Cameras

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-20299 · Security Note
• https://osv.dev/vulnerability/CVE-2018-20299 · Vendor Advisory
• https://psirt.bosch.com/Advisory/BOSCH-2018-1203.html · Vendor Advisory