PT-2023-23672 · Bosch · Bosch Ip Cameras

Published 2023-06-15 · Updated 2023-07-05 · CVE-2023-32229

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Bosch IP cameras of family CPP13 and CPP14 (affected versions not specified)

Description The issue arises from an error in the software interface to the secure element chip. This error can cause permanent damage to the chip when the Stream security option is enabled with MD5, SHA-1, or SHA-256 for signing the video stream.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-400

CWE-1246

Related Identifiers

CVE-2023-32229

Affected Products

Bosch Ip Cameras

References · 5

• https://osv.dev/vulnerability/CVE-2023-32229 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-32229 · Security Note
• https://psirt.bosch.com/security-advisories/BOSCH-SA-435698-BT.html · Vendor Advisory
• https://t.me/cvenotify/52386 · Telegram Post
• https://t.me/cibsecurity/65260 · Telegram Post