CVE-2023-32229
Summary
| CVE | CVE-2023-32229 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-06-15 11:15:00 UTC |
| Updated | 2023-07-05 15:31:00 UTC |
| Description | Due to an error in the software interface to the secure element chip on Bosch IP cameras of family CPP13 and CPP14, the chip can be permanently damaged when enabling the Stream security option (signing of the video stream) with option MD5, SHA-1 or SHA-256. |
Risk And Classification
Problem Types: CWE-400
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Bosch | Autodome 7000i | - | All | All | All |
| Hardware | Bosch | Autodome 7100 Ir | - | All | All | All |
| Hardware | Bosch | Autodome Inteox 7000i | - | All | All | All |
| Operating System | Bosch | Cpp13 Firmware | All | All | All | All |
| Operating System | Bosch | Cpp14 Firmware | All | All | All | All |
| Hardware | Bosch | Dinion 7100i Ir | - | All | All | All |
| Hardware | Bosch | Dinion Inteox 7100i Ir | - | All | All | All |
| Hardware | Bosch | Flexidome Indoor 5100i | - | All | All | All |
| Hardware | Bosch | Flexidome Indoor 5100i Ir | - | All | All | All |
| Hardware | Bosch | Flexidome Inteox 7100i Ir | - | All | All | All |
| Hardware | Bosch | Flexidome Multi 7000i | - | All | All | All |
| Hardware | Bosch | Flexidome Multi 7000i Ir | - | All | All | All |
| Hardware | Bosch | Flexidome Outdoor 5100i | - | All | All | All |
| Hardware | Bosch | Flexidome Outdoor 5100i Ir | - | All | All | All |
| Hardware | Bosch | Flexidome Panoramic 5100i | - | All | All | All |
| Hardware | Bosch | Flexidome Panoramic 5100i Ir | - | All | All | All |
| Hardware | Bosch | Mic Inteox 7100i | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Possible damage of secure element in Bosch IP cameras | Bosch PSIRT | MISC | psirt.bosch.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.