CVE-2021-23852: Denial of Service (DoS) due to invalid web parameter

Severity: medium (CVSS 4.9 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2021-06-09 · updated 2026-06-17
Weakness: CWE-400

Description

An authenticated attacker with administrator rights Bosch IP cameras can call an URL with an invalid parameter that causes the camera to become unresponsive for a few seconds and cause a Denial of Service (DoS).

Affected products

Bosch Cpp13 Firmware: all versions
Bosch Cpp4 Firmware: all versions
Bosch Cpp6 Firmware: all versions
Bosch Cpp7.3 Firmware: all versions
Bosch Cpp7 Firmware: all versions

References

https://psirt.bosch.com/security-advisories/bosch-sa-478243-bt.html
https://psirt.bosch.com/security-advisories/bosch-sa-478243-bt.html

Get alerted when CVE-2021-23852 or the next vulnerability affects your stack