CVE-2025-48735: Bos IP Camera

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

A SQL Injection issue in the request body processing in BOS IPCs with firmware 21.45.8.2.2_220219 before 21.45.8.2.3_230220 allows remote attackers to obtain sensitive information from the database via crafted input in the request body.

Affected products

• Bos IP Camera: from 21.45.8.2.2_220219, before 21.45.8.2.3_230220 (fixed in 21.45.8.2.3_230220)

Published 2025-05-23. Last modified 2026-06-17.