Description (CNA)
An improper handling of a malformed API answer packets to API clients in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service (DoS) situation. To exploit this vulnerability an attacker has to replace an existing API server e.g. through Man-in-the-Middle attacks.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Bosch / BVMS | affected 0 through 12.0.0 |
| Bosch / BVMS Viewer | affected 0 through 12.0.0 |
| Bosch / Configuration Manager | affected 0 through 7.62 |
| Bosch / DIVAR IP 7000 R2 | affected 0 through 12.0.0 |
| Bosch / DIVAR IP all-in-one 5000 | affected 0 through 12.0.0 |
| Bosch / DIVAR IP all-in-one 7000 | affected 0 through 12.0.0 |
| Bosch / DIVAR IP all-in-one 7000 R3 | affected 0 through 12.0.0 |
| Bosch / DIVAR IP all-in-one 4000 | affected 0 through 12.0.0 |
| Bosch / DIVAR IP all-in-one 6000 | affected 0 through 12.0.0 |
| Bosch / Project Assistant | affected 0 through 2.3 |
| Bosch / Video Security Client | affected 0 through 3.3.5 |
| Bosch / BIS Video Engine | affected 0 through 5.0.1 |
| Bosch / Intelligent Insights | affected 0 through 1.0.3.14 |
| Bosch / ONVIF Camera Event Driver Tool | affected 0 through 2.0.0.8 |
CWE
CWE-703
References
ADP enrichment
No English description supplied.