CVE-2021-23850 Buffer Overflow vulnerability in the recovery image telnet server
A buffer overflow in the recovery image telnet server allows remote code execution, requiring administrative rights or physical access to boot the recovery mode.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-23850?
CVE-2021-23850 is a medium-severity memory corruption vulnerability in Bosch CPP Firmware, published on 30 Mar 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A specially crafted TCP/IP packet may cause a camera recovery image telnet interface to crash. It may also cause a buffer overflow which could enable remote code execution. The recovery image can only be booted with administrative rights or with physical access to the camera and allows the upload of a new firmware in case of a damaged firmware.
Which versions are affected by CVE-2021-23850?
It affects 68 products.
Products include Bosch Autodome 7000 Firmware, Bosch Autodome Ip 4000 Hd Firmware, Bosch Autodome Ip 4000i Firmware, Bosch Autodome Ip 5000 Hd Firmware, Bosch Autodome Ip 5000 Ir Firmware, Bosch Autodome Ip 5000i Firmware and 62 more.
How do I fix CVE-2021-23850?
No fix has been published for CVE-2021-23850 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2021-23850 being exploited?
There is no known exploitation of CVE-2021-23850 in the wild and no public exploit code.
Other vulnerabilities in Bosch CPP Firmware
Sources
Also known as GHSA-4xm2-6jv3-5vh9.