CVE-2015-6970: Boschsecurity Nbn-498 DINION2X Day/night IP Cameras Firmware

Critical severity, CVSS 9.8. EPSS: 5.3% chance of exploitation in the next 30 days.

The web interface in Bosch Security Systems NBN-498 Dinion2X Day/Night IP Cameras with H.264 Firmware 4.54.0026 allows remote attackers to conduct XML injection attacks via the idstring parameter to rcp.xml.

Affected products

• Boschsecurity Nbn-498 DINION2X Day/night IP Cameras Firmware: version 4.54.0026 only

Published 2020-02-18. Last modified 2026-06-17.