High severity7.2NVD Advisory· Published Dec 18, 2023· Updated Jun 17, 2026

CVE-2023-39509

Description

A command injection vulnerability exists in Bosch IP cameras that allows an authenticated user with administrative rights to run arbitrary commands on the OS of the camera.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Bosch/Cpp13 Firmware
cpe:2.3:o:bosch:cpp13_firmware:*:*:*:*:*:*:*:*
Range: <=8.90
Bosch/Cpp14 Firmware
cpe:2.3:o:bosch:cpp14_firmware:*:*:*:*:*:*:*:*
Range: >=8.20,<=8.81
Bosch/IP camerasllm-create
Bosch/360 Indoor Camera Firmwarecpe-rescue
Range: 8.20

Patches

Vulnerability mechanics

References

psirt.bosch.com/security-advisories/BOSCH-SA-638184-BT.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000