CVE-2018-19036 : An issue was discovered in several Bosch IP cameras for firmware versions 6.32 and higher. A malicious client could pote

CVSS scores for CVE-2018-19036

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2018-19036

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2018-19036

https://media.boschsecurity.com/fs/media/pb/security_advisories/bosch-2018-1202-bt-cve-2018-19036_security_advisory_ip_camera_vulnerability.pdf

Mitigation;Patch;Vendor Advisory

Products affected by CVE-2018-19036

Bosch » Common Product Platform 4 Firmware
Versions from including (>=) 6.32
cpe:2.3:o:bosch:common_product_platform_4_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Bosch » Autodome Ip 4000 Hd » Version: N/A
When used together with: Bosch » Autodome Ip 5000 Hd » Version: N/A
When used together with: Bosch » Autodome Ip 5000 Ir » Version: N/A
When used together with: Bosch » Autodome Ip 7000 » Version: N/A
When used together with: Bosch » Dinion Hd 1080p » Version: N/A
When used together with: Bosch » Dinion Hd 1080p Hdr » Version: N/A
When used together with: Bosch » Dinion Hd 720p » Version: N/A
When used together with: Bosch » Dinion Imager 9000 Hd » Version: N/A
When used together with: Bosch » Dinion Ip 4000 Hd » Version: N/A
When used together with: Bosch » Dinion Ip 5000 Hd » Version: N/A
When used together with: Bosch » Dinion Ip 5000 Mp » Version: N/A
When used together with: Bosch » Dinion Ip Bullet 4000 » Version: N/A
When used together with: Bosch » Dinion Ip Bullet 5000 » Version: N/A
When used together with: Bosch » Dinion Ip Starlight 7000 Hd » Version: N/A
When used together with: Bosch » Extegra Ip Dynamic 9000 » Version: N/A
When used together with: Bosch » Extegra Ip Starlight 9000 » Version: N/A
When used together with: Bosch » Flexidome Corner 9000 Mp » Version: N/A
When used together with: Bosch » Flexidome Hd 1080p » Version: N/A
When used together with: Bosch » Flexidome Hd 1080p Hdr » Version: N/A
When used together with: Bosch » Flexidome Hd 720p » Version: N/A
When used together with: Bosch » Flexidome Ip Indoor 4000 Hd » Version: N/A
When used together with: Bosch » Flexidome Ip Indoor 4000 Ir » Version: N/A
When used together with: Bosch » Flexidome Ip Indoor 5000 Hd » Version: N/A
When used together with: Bosch » Flexidome Ip Indoor 5000 Mp » Version: N/A
When used together with: Bosch » Flexidome Ip Micro 2000 Hd » Version: N/A
When used together with: Bosch » Flexidome Ip Micro 2000 Ip » Version: N/A
When used together with: Bosch » Flexidome Ip Micro 5000 Hd » Version: N/A
When used together with: Bosch » Flexidome Ip Micro 5000 Mp » Version: N/A
When used together with: Bosch » Flexidome Ip Outdoor 4000 Hd » Version: N/A
When used together with: Bosch » Flexidome Ip Outdoor 4000 Ir » Version: N/A
When used together with: Bosch » Flexidome Ip Outdoor 5000 Hd » Version: N/A
When used together with: Bosch » Flexidome Ip Outdoor 5000 Mp » Version: N/A
When used together with: Bosch » Flexidome Ip Panormic 5000 » Version: N/A
When used together with: Bosch » Ip 2000 » Version: N/A
When used together with: Bosch » Ip 2000 Hd » Version: N/A
When used together with: Bosch » Ip Bullet 4000 Hd » Version: N/A
When used together with: Bosch » Ip Bullet 5000 Hd » Version: N/A
When used together with: Bosch » Mic Ip Dynamic 7000 » Version: N/A
When used together with: Bosch » Mic Ip Starlight 7000 » Version: N/A
When used together with: Bosch » Tinyon Ip 2000 » Version: N/A
When used together with: Bosch » Vandal-proof Flexidome Hd 1080p » Version: N/A
When used together with: Bosch » Vandal-proof Flexidome Hd 1080p Hdr » Version: N/A
When used together with: Bosch » Vandal-proof Flexidome Hd 720p » Version: N/A
Bosch » Common Product Platform 6 Firmware
Versions from including (>=) 6.32
cpe:2.3:o:bosch:common_product_platform_6_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Bosch » Aviotec Ip Starlight 8000 » Version: N/A
When used together with: Bosch » Dinion Ip Starlight 8000 12mp » Version: N/A
When used together with: Bosch » Dinion Ip Ultra 8000 12mp » Version: N/A
When used together with: Bosch » Flexidome Ip Panoramic 6000 12mp 180 » Version: N/A
When used together with: Bosch » Flexidome Ip Panoramic 6000 12mp 180 Iva » Version: N/A
When used together with: Bosch » Flexidome Ip Panoramic 6000 12mp 360 » Version: N/A
When used together with: Bosch » Flexidome Ip Panoramic 6000 12mp 360 Iva » Version: N/A
When used together with: Bosch » Flexidome Ip Panoramic 7000 12mp 180 » Version: N/A
When used together with: Bosch » Flexidome Ip Panoramic 7000 12mp 180 Iva » Version: N/A
When used together with: Bosch » Flexidome Ip Panoramic 7000 12mp 360 » Version: N/A
When used together with: Bosch » Flexidome Ip Panoramic 7000 12mp 360 Iva » Version: N/A
Bosch » Common Product Platform 7 Firmware
Versions from including (>=) 6.32
cpe:2.3:o:bosch:common_product_platform_7_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Bosch » Dinion Ip Starlight 6000 » Version: N/A
When used together with: Bosch » Dinion Ip Starlight 7000 » Version: N/A
When used together with: Bosch » Dinion Ip Thermal 8000 » Version: N/A
When used together with: Bosch » Flexidome Ip Starlight 6000 » Version: N/A
When used together with: Bosch » Flexidome Ip Starlight 7000 » Version: N/A
Bosch » Common Product Platform 7.3 Firmware
Versions from including (>=) 6.32
cpe:2.3:o:bosch:common_product_platform_7.3_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Bosch » Autodome Ip 4000i » Version: N/A
When used together with: Bosch » Autodome Ip 5000i » Version: N/A
When used together with: Bosch » Autodome Ip Starlight 5000i » Version: N/A
When used together with: Bosch » Autodome Ip Starlight 7000i » Version: N/A
When used together with: Bosch » Dinion Ip Bullet 4000i » Version: N/A
When used together with: Bosch » Dinion Ip Bullet 5000i » Version: N/A
When used together with: Bosch » Dinion Ip Bullet 6000i » Version: N/A
When used together with: Bosch » Flexidome Ip 4000i » Version: N/A
When used together with: Bosch » Flexidome Ip 5000i » Version: N/A
When used together with: Bosch » Mic Ip Fusion 9000i » Version: N/A
When used together with: Bosch » Mic Ip Starlight 7000i » Version: N/A

Vulnerability Details : CVE-2018-19036

Exploit prediction scoring system (EPSS) score for CVE-2018-19036

CVSS scores for CVE-2018-19036

CWE ids for CVE-2018-19036

References for CVE-2018-19036

Products affected by CVE-2018-19036