CVE-2021-23850: Bosch Autodome 7000 Firmware

High severity, CVSS 7.2. EPSS: 1.6% chance of exploitation in the next 30 days.

A specially crafted TCP/IP packet may cause a camera recovery image telnet interface to crash. It may also cause a buffer overflow which could enable remote code execution. The recovery image can only be booted with administrative rights or with physical access to the camera and allows the upload of a new firmware in case of a damaged firmware.

Affected products

• Bosch Autodome 7000 Firmware: version cpp4 only
• Bosch Autodome IP 4000 Hd Firmware: version cpp4 only
• Bosch Autodome IP 4000i Firmware: version cpp7.3 only
• Bosch Autodome IP 5000 Hd Firmware: version cpp4 only
• Bosch Autodome IP 5000 Ir Firmware: version cpp4 only
• Bosch Autodome IP 5000i Firmware: version cpp7.3 only
• Bosch Autodome IP Starlight 5000i Firmware: version cpp7.3 only
• Bosch Autodome IP Starlight 7000i Firmware: version cpp7.3 only
• Bosch Aviotec IP Starlight 8000 Firmware: version cpp6 only
• Bosch Dinion Hd 1080p Firmware: version cpp4 only
• Bosch Dinion Hd 1080p Hdr Firmware: version cpp4 only
• Bosch Dinion Hd 720p Firmware: version cpp4 only
• Bosch Dinion Imager 9000 Hd Firmware: version cpp4 only
• Bosch Dinion IP 3000i Firmware: version cpp7.3 only
• Bosch Dinion IP 4000 Hd Firmware: version cpp4 only
• Bosch Dinion IP 5000 Hd Firmware: version cpp4 only
• Bosch Dinion IP 5000 Mp Firmware: version cpp4 only
• Bosch Dinion IP Bullet 4000 Firmware: version cpp4 only
• Bosch Dinion IP Bullet 4000i Firmware: version cpp7.3 only
• Bosch Dinion IP Bullet 5000 Firmware: version cpp7.3 only; version cpp4 only
• Bosch Dinion IP Bullet 5000i Firmware: version cpp7.3 only
• Bosch Dinion IP Bullet 6000i Firmware: version cpp7.3 only
• Bosch Dinion IP Starlight 6000 Firmware: version cpp7 only
• Bosch Dinion IP Starlight 7000 Firmware: version cpp7 only
• Bosch Dinion IP Starlight 7000 Hd Firmware: version cpp4 only
• and 43 more

Published 2022-03-30. Last modified 2026-06-17.