Description (CNA)
A SQL Injection issue in the request body processing in BOS IPCs with firmware 21.45.8.2.2_220219 before 21.45.8.2.3_230220 allows remote attackers to obtain sensitive information from the database via crafted input in the request body.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| BOS / IP camera | affected 21.45.8.2.2_220219 before 21.45.8.2.3_230220 |
CWE
CWE-89
References
ADP enrichment
No English description supplied.
No references supplied.