CVE-2022-41677
Estado: ModificadaMedia (5.3)—
An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information (like capabilities) about the device itself and network settings of the device, disclosing possibly internal network settings if the device is connected to the internet.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Puntuación base: 5.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.60%
- Percentil entre todas las CVEs puntuadas: 47
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (6)
CWE
- CWE-284
- NVD-CWE-noinfo
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2022-41677",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2022-41677",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2024-01-05T17:50:57.332237Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "psirt@bosch.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 5.3,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "LOW"
},
"impactScore": 1.4,
"exploitabilityScore": 3.9
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 5.3,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "LOW"
},
"impactScore": 1.4,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "psirt@bosch.com",
"affectedData": [
{
"vendor": "Bosch",
"product": "Camera Firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "8.80"
}
],
"platforms": [
"CPP14"
]
},
{
"vendor": "Bosch",
"product": "Camera Firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "8.48"
}
],
"platforms": [
"CPP13"
]
},
{
"vendor": "Bosch",
"product": "Camera Firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "7.86"
}
],
"platforms": [
"CPP7.3"
]
},
{
"vendor": "Bosch",
"product": "Camera Firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "7.86"
}
],
"platforms": [
"CPP7"
]
},
{
"vendor": "Bosch",
"product": "Camera Firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "7.86"
}
],
"platforms": [
"CPP6"
]
},
{
"vendor": "Bosch",
"product": "Camera Firmware",
"versions": [
{
"status": "affected",
"version": "0",
"versionType": "custom",
"lessThanOrEqual": "7.10"
}
],
"platforms": [
"CPP4"
]
}
]
}
],
"published": "2023-12-18T13:15:06.570",
"references": [
{
"url": "https://psirt.bosch.com/security-advisories/bosch-sa-839739-BT.html",
"tags": [
"Vendor Advisory"
],
"source": "psirt@bosch.com"
},
{
"url": "https://psirt.bosch.com/security-advisories/bosch-sa-839739-BT.html",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@bosch.com",
"description": [
{
"lang": "en",
"value": "CWE-284"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An information disclosure vulnerability was discovered in Bosch IP camera devices allowing an unauthenticated attacker to retrieve information (like capabilities) about the device itself and network settings of the device, disclosing possibly internal network settings if the device is connected to the internet."
},
{
"lang": "es",
"value": "Se descubrió una vulnerabilidad de divulgación de información en los dispositivos de cámara IP de Bosch que permite a un atacante no autenticado recuperar información (como capacidades) sobre el dispositivo en sí y la configuración de red del dispositivo, revelando posiblemente configuraciones de red internas si el dispositivo está conectado a Internet."
}
],
"lastModified": "2026-06-17T05:03:37.200",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:bosch:cpp14_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "89F54BC8-9DAE-418E-BAB3-EF5D1B5FAD8A",
"versionEndIncluding": "8.80"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:bosch:cpp14:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B7872B92-4708-4522-BA8F-5BE941D169AC"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:bosch:cpp13_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F5AD0A0E-EBD7-4A76-8C84-7A023320E0BA",
"versionEndIncluding": "8.48"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:bosch:cpp13:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "80149FF9-3C6D-4C80-8257-CEB2BE8B0DCA"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:bosch:cpp7.3_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F370A3C7-01AC-46F8-A682-FFA2286B7445",
"versionEndIncluding": "7.86"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:bosch:cpp7.3:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5B97B95A-8143-4766-9F10-87E19AED22C6"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:bosch:cpp7_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "065122F8-B39D-4DA5-BB1F-942DE35AB61E",
"versionEndIncluding": "7.86"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:bosch:cpp7:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E8339008-8889-47B0-9416-CCC6CE75D277"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:bosch:cpp6_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BFC2D04C-E319-47A8-8DA5-CA98C37852A8",
"versionEndIncluding": "7.86"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:bosch:cpp6:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "27B65C05-69F5-4048-BCBE-DA0D53EF9AFE"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:bosch:cpp4_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D04376BD-C049-44E6-A6D6-27BE389154C8",
"versionEndIncluding": "7.10"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:bosch:cpp4:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1F4FA4F9-6BDC-44C4-A151-16ECF7926A83"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@bosch.com"
}