CVE-2021-23850
A specially crafted TCP/IP packet may cause a camera recovery image telnet interface to crash.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.56%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A specially crafted TCP/IP packet may cause a camera recovery image telnet interface to crash. It may also cause a buffer overflow which could enable remote code execution. The recovery image can only be booted with administrative rights or with physical access to the camera and allows the upload of a new firmware in case of a damaged firmware.
- CVSS 3.1
- 7.2 HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 1.56% probability · 75th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Weakness
- CWE-121, CWE-120
- Affected
- bosch/autodome ip 4000i firmware · bosch/autodome ip 5000i firmware · bosch/autodome ip starlight 5000i firmware · bosch/autodome ip starlight 7000i firmware · bosch/dinion ip 3000i firmware · bosch/dinion ip bullet 4000i firmware · bosch/dinion ip bullet 5000 firmware · bosch/dinion ip bullet 5000i firmware · bosch/dinion ip bullet 6000i firmware · bosch/flexidome ip 3000i firmware · bosch/flexidome ip 4000i firmware · bosch/flexidome ip 5000i firmware · bosch/flexidome ip starlight 5000i firmware · bosch/flexidome ip starlight 8000i firmware · bosch/mic ip starlight 7000i firmware · bosch/mic ip starlight 7100i firmware · bosch/mic ip ultra 7100i firmware · bosch/mic ip fusion 9000i firmware · bosch/dinion ip starlight 6000 firmware · bosch/dinion ip starlight 7000 firmware · +40 more
- Source
- psirt@bosch.com
EPSS 1.6% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
- https://psirt.bosch.com/security-advisories/bosch-sa-478243-bt.htmlNot Applicable, Vendor Advisory
- https://psirt.bosch.com/security-advisories/bosch-sa-446276-bt.htmlVendor Advisory
- https://psirt.bosch.com/security-advisories/bosch-sa-478243-bt.htmlNot Applicable, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.