An improper handling of a malformed API answer packets to API clients in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service (DoS) situation. To exploit this vulnerability an attacker has to replace an existing API server e.g. through Man
An improper handling of a malformed API answer packets to API clients in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service (DoS) situation. To exploit this vulnerability an attacker has to replace an existing API server e.g. through Man-in-the-Middle attacks.
| Vendor | Product | Versions |
|---|---|---|
| Bosch | BVMS | 0 |
| Bosch | BVMS Viewer | 0 |
| Bosch | Configuration Manager | 0 |
| Bosch | DIVAR IP 7000 R2 | 0 |
| Bosch | DIVAR IP all | in-one 5000 — 0 |
| Bosch | DIVAR IP all | in-one 7000 — 0 |
| Bosch | DIVAR IP all | in-one 7000 R3 — 0 |
| Bosch | DIVAR IP all | in-one 4000 — 0 |
| Bosch | DIVAR IP all | in-one 6000 — 0 |
| Bosch | Project Assistant | 0 |
| Bosch | Video Security Client | 0 |
| Bosch | BIS Video Engine | 0 |
| Bosch | Intelligent Insights | 0 |
| Bosch | ONVIF Camera Event Driver Tool | 0 |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.