CVE-2015-6970

Critical

The web interface in Bosch Security Systems NBN-498 Dinion2X Day/Night IP Cameras with H.264 Firmware 4.54.0026 allows remote attackers to…

mitre·CWE-91·Published 2020-02-18

CVSS

9.8

EPSS

0.05

KEV

Exploits

cve.orgen

207 chars

The web interface in Bosch Security Systems NBN-498 Dinion2X Day/Night IP Cameras with H.264 Firmware 4.54.0026 allows remote attackers to conduct XML injection attacks via the idstring parameter to rcp.xml.

NVDen

207 chars

NVDes

228 chars

La interfaz web en Bosch Security Systems NBN-498 Dinion2X Day/Night IP Cameras versiones de Firmware 4.54.0026, permite a atacantes remotos dirigir ataques de inyección XML por medio del parámetro idstring a un archivo rcp.xml.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	7.5	10.0	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H