CVE-2023-32229

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-06-15 · updated 2026-06-17
Weakness: CWE-1246

Description

Due to an error in the software interface to the secure element chip on Bosch IP cameras of family CPP13 and CPP14, the chip can be permanently damaged when enabling the Stream security option (signing of the video stream) with option MD5, SHA-1 or SHA-256.

Affected products

Bosch Cpp13 Firmware: before 8.48.0017 — fixed in 8.48.0017
Bosch Cpp14 Firmware: from 8.50 before 8.80.0090 — fixed in 8.80.0090

How to fix

Upgrade to a fixed version: Bosch Cpp13 Firmware 8.48.0017; Bosch Cpp14 Firmware 8.80.0090. Check the vendor advisory for mitigations.

References

https://psirt.bosch.com/security-advisories/BOSCH-SA-435698-BT.html
https://psirt.bosch.com/security-advisories/BOSCH-SA-435698-BT.html

Get alerted when CVE-2023-32229 or the next vulnerability affects your stack