high8.3
CVE-2021-23854
An error in the handling of a page parameter in Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interface.
Impact
An error in the handling of a page parameter in Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interface. This issue only affects versions 7.7x and 7.6x. All other versions are not affected.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bosch | Cpp6 Firmware | Versions 7.62, 7.70, 7.72 |
| Bosch | Cpp7 Firmware | Versions 7.62, 7.70, 7.72 |
| Bosch | Cpp7.3 Firmware | Versions 7.62, 7.70, 7.72 |
| Bosch | Cpp13 Firmware | Versions 7.75, 7.76 |