What’s Vulnerable › Vulnerabilities

CVE-2021-23850: Buffer Overflow vulnerability in the recovery image telnet server

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-03-30 · updated 2026-06-17
• Weakness: CWE-121

Description

A specially crafted TCP/IP packet may cause a camera recovery image telnet interface to crash. It may also cause a buffer overflow which could enable remote code execution. The recovery image can only be booted with administrative rights or with physical access to the camera and allows the upload of a new firmware in case of a damaged firmware.

Affected products

• Bosch Autodome 7000 Firmware: cpp4
• Bosch Autodome Ip 4000 Hd Firmware: cpp4
• Bosch Autodome Ip 4000I Firmware: cpp7.3
• Bosch Autodome Ip 5000 Hd Firmware: cpp4
• Bosch Autodome Ip 5000 Ir Firmware: cpp4
• Bosch Autodome Ip 5000I Firmware: cpp7.3
• Bosch Autodome Ip Starlight 5000I Firmware: cpp7.3
• Bosch Autodome Ip Starlight 7000I Firmware: cpp7.3
• Bosch Aviotec Ip Starlight 8000 Firmware: cpp6
• Bosch Dinion Hd 1080P Firmware: cpp4
• Bosch Dinion Hd 1080P Hdr Firmware: cpp4
• Bosch Dinion Hd 720P Firmware: cpp4
• Bosch Dinion Imager 9000 Hd Firmware: cpp4
• Bosch Dinion Ip 3000I Firmware: cpp7.3
• Bosch Dinion Ip 4000 Hd Firmware: cpp4
• Bosch Dinion Ip 5000 Hd Firmware: cpp4
• Bosch Dinion Ip 5000 Mp Firmware: cpp4
• Bosch Dinion Ip Bullet 4000 Firmware: cpp4
• Bosch Dinion Ip Bullet 4000I Firmware: cpp7.3
• Bosch Dinion Ip Bullet 5000 Firmware: cpp7.3, cpp4
• Bosch Dinion Ip Bullet 5000I Firmware: cpp7.3
• Bosch Dinion Ip Bullet 6000I Firmware: cpp7.3
• Bosch Dinion Ip Starlight 6000 Firmware: cpp7
• Bosch Dinion Ip Starlight 7000 Firmware: cpp7
• Bosch Dinion Ip Starlight 7000 Hd Firmware: cpp4
• Bosch Dinion Ip Starlight 8000 Firmware: cpp6
• Bosch Dinion Ip Thermal 8000 Firmware: cpp7
• Bosch Dinion Ip Thermal 9000 Rm Firmware: cpp7
• Bosch Dinion Ip Ultra 8000 Firmware: cpp6
• Bosch Flexidome Corner 9000 Mp Firmware: cpp4

References

• https://psirt.bosch.com/security-advisories/bosch-sa-478243-bt.html
• https://psirt.bosch.com/security-advisories/bosch-sa-446276-bt.html
• https://psirt.bosch.com/security-advisories/bosch-sa-478243-bt.html

Get alerted when CVE-2021-23850 or the next vulnerability affects your stack