Description
An improper handling of a malformed API answer packets to API clients in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service (DoS) situation. To exploit this vulnerability an attacker has to replace an existing API server e.g. through Man-in-the-Middle attacks.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Bosch BVMS
0 to ≤ 12.0.0affected
Bosch BVMS Viewer
0 to ≤ 12.0.0affected
Bosch Configuration Manager
0 to ≤ 7.62affected
Bosch DIVAR IP 7000 R2
0 to ≤ 12.0.0affected
Bosch DIVAR IP all-in-one 5000
0 to ≤ 12.0.0affected
Bosch DIVAR IP all-in-one 7000
0 to ≤ 12.0.0affected
Bosch DIVAR IP all-in-one 7000 R3
0 to ≤ 12.0.0affected
Bosch DIVAR IP all-in-one 4000
0 to ≤ 12.0.0affected
Bosch DIVAR IP all-in-one 6000
0 to ≤ 12.0.0affected
Bosch Project Assistant
0 to ≤ 2.3affected
Bosch Video Security Client
0 to ≤ 3.3.5affected
Bosch BIS Video Engine
0 to ≤ 5.0.1affected
Bosch Intelligent Insights
0 to ≤ 1.0.3.14affected
Bosch ONVIF Camera Event Driver Tool
0 to ≤ 2.0.0.8affected