critical9.8Public exploit code
CVE-2015-6970
The web interface in Bosch Security Systems NBN-498 Dinion2X Day/Night IP Cameras with H.264 Firmware 4.54.0026 allows remote attackers to conduct XML injectio…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Bosch Security Systems Dinion NBN-498 - Web Interface XML Injection2015-10-01 · webapps · hardware
Impact
The web interface in Bosch Security Systems NBN-498 Dinion2X Day/Night IP Cameras with H.264 Firmware 4.54.0026 allows remote attackers to conduct XML injection attacks via the idstring parameter to rcp.xml.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Boschsecurity | Nbn-498 Dinion2x Day\/Night Ip Cameras Firmware | Version 4.54.0026 |