This vulnerability (CVE-2024-58330) in Bosch IP camera firmware affects the CPP13 and CPP14 families. Due to improper access control (CWE-284), the firmware lacks an authentication check for accessing video analytics event data. As a result, an unauthenticated attacker can retrieve sensitive event data without authorization. The CVSS 3.1 base score is 7.5 (high), with attack vector network, low attack complexity, no privileges required, no user interaction, unchanged scope, and high confidentiality impact. No integrity or availability impact is reported. There is no vendor advisory or patch information available at this time.

The vulnerability allows unauthorized disclosure of video analytics event data from affected Bosch IP cameras. This compromises the confidentiality of potentially sensitive surveillance information. There is no impact on data integrity or system availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to affected cameras and monitor for unauthorized access attempts. Avoid exposing these devices directly to untrusted networks.