CVE-2021-23853 HIGH

CVE-2021-23853: Improper Input Validation of HTTP Headers

Vendor Bosch
Product CPP Firmware
Weakness CWE-20 · Input validation
Published June 9, 2021
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

8.3/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

In Bosch IP cameras, improper validation of the HTTP header allows an attacker to inject arbitrary HTTP headers through crafted URLs.

Key dates

02Disclosure timeline

June 9, 2021 CVE published
September 17, 2024 Record updated