medium5.9
CVE-2023-35867
An improper handling of a malformed API answer packets to API clients in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of …
Impact
An improper handling of a malformed API answer packets to API clients in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service (DoS) situation. To exploit this vulnerability an attacker has to replace an existing API server e.g. through Man-in-the-Middle attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bosch | Building Integration System Video Engine | through 5.0.1 |
| Bosch | Bosch Video Management System | through 12.0 |
| Bosch | Video Management System Viewer | through 12.0 |
| Bosch | Configuration Manager | through 7.62 |
| Bosch | Divar Ip 7000 R2 Firmware | through 12.0 |
| Bosch | Divar Ip All-In-One 4000 Firmware | through 12.0 |
| Bosch | Divar Ip All-In-One 5000 Firmware | through 12.0 |
| Bosch | Divar Ip All-In-One 6000 Firmware | through 12.0 |
| Bosch | Divar Ip All-In-One 7000 Firmware | through 12.0 |
| Bosch | Divar Ip All-In-One 7000 R3 Firmware | through 12.0 |
| Bosch | Intelligent Insights | through 1.0.3.14 |
| Bosch | Onvif Camera Event Driver Tool | through 2.0.0.8 |