CVE-2021-23854: Bosch CPP13 Firmware

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

An error in the handling of a page parameter in Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interface. This issue only affects versions 7.7x and 7.6x. All other versions are not affected.

Affected products

• Bosch CPP13 Firmware: version 7.75 only; version 7.76 only
• Bosch CPP6 Firmware: version 7.62 only; version 7.70 only; version 7.72 only
• Bosch CPP7.3 Firmware: version 7.62 only; version 7.70 only; version 7.72 only
• Bosch CPP7 Firmware: version 7.62 only; version 7.70 only; version 7.72 only

Published 2021-06-09. Last modified 2026-06-17.