CVE-2021-23852CWE-400

Denial of Service (DoS) due to invalid web parameter

Medium · published June 9, 2021

CVSS v3.1
4.9
EPSS
1%
Percentile
57.3
In the wild
Unconfirmed
What it is

An authenticated attacker with administrator rights Bosch IP cameras can call an URL with an invalid parameter that causes the camera to become unresponsive for a few seconds and cause a Denial of Service (DoS).

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00832 · 57.3th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2021-06-09T14:18Z
EPSS history
Timeline
  • 09 JUN 14:18Z
    Denial of Service (DoS) due to invalid web parameter
    cvelistv5