CVE-2023-32230

State: Published
Severity: 7.5 High
Published: Dec 18, 2023
Updated: Aug 2, 2024
Reserved: May 4, 2023

Description

An improper handling of a malformed API request to an API server in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service (DoS) situation.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	bosch

Weaknesses

CWE-703 Improper Check or Handling of Exceptional Conditions

Affected Products

Product	Versions
Video Recording ManagerBosch	04.10.0079 and earlierAffected
Video Streaming GatewayBosch	8.1.2.2 and earlierAffected 9.0.0 through 9.0.0.178Affected
MonitorwallBosch	10.00.0164 and earlierAffected
VJD-7513Bosch	10.40.0055 and earlierAffected
VJD-7523Bosch	10.40.0055 and earlierAffected

References

https://psirt.bosch.com/security-advisories/BOSCH-SA-092656-BT.htmlvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.