CVSS 3.1
5.9 mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2023-35867
Medium (5.9) in bosch. EPSS 0.6% chance of exploitation in the next 30 days.
An improper handling of a malformed API answer packets to API clients in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service (DoS) situation. To exploit this vulnerability an attacker has to replace an existing API server e.g. through Man-in-the-Middle attacks.
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
- CWE
- CWE-703
- Published
- Modified
- Record from
- the NVD, synced
Affected
- bosch:_onvif_camera_event_driver_tool
- bosch:bosch_video_management_system
- bosch:building_integration_system_video_engine
- bosch:configuration_manager
- bosch:divar_ip_7000_r2_firmware
- bosch:divar_ip_all-in-one_4000_firmware
- bosch:divar_ip_all-in-one_5000_firmware
- bosch:divar_ip_all-in-one_6000_firmware
- bosch:divar_ip_all-in-one_7000_firmware
- bosch:divar_ip_all-in-one_7000_r3_firmware
- bosch:intelligent_insights
- bosch:project_assistant
- bosch:video_management_system_viewer
- bosch:video_security_client