CVE-2023-32230

🗓️ 18 Dec 2023 12:58:08Reported by boschType

Improper handling of malformed API request in Bosch BT software products, leading to DoS

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2023-32230	12 Jan 202409:37	–	circl
CNNVD	Selected Bosch Products Security Vulnerabilities	18 Dec 202300:00	–	cnnvd
Cvelist	CVE-2023-32230	18 Dec 202312:58	–	cvelist
EUVD	EUVD-2023-36488	3 Oct 202520:07	–	euvd
NVD	CVE-2023-32230	18 Dec 202313:15	–	nvd
Prion	Input validation	18 Dec 202313:15	–	prion
Positive Technologies	PT-2023-23674 · Bosch · Bosch Bt	18 Dec 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-32230	23 May 202503:48	–	redhatcve

NVD

Node

bosch monitor_wallRange≤10.00.0164

Node

bosch videojet_decoder_7513_firmwareRange≤10.40.0055

AND

bosch videojet_decoder_7513Match-

Node

bosch videojet_decoder_7523_firmwareRange≤10.40.0055

AND

bosch videojet_decoder_7523Match-

Node

bosch video_recording_managerRange≤04.10.0079

Node

bosch video_streaming_gatewayRange≤8.1.2.2

bosch video_streaming_gatewayRange9.0.0–9.0.0.178

[
  {
    "vendor": "Bosch",
    "product": "Video Recording Manager",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "04.10.0079"
      }
    ]
  },
  {
    "vendor": "Bosch",
    "product": "Video Streaming Gateway",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "8.1.2.2"
      },
      {
        "version": "9.0.0",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "9.0.0.178"
      }
    ]
  },
  {
    "vendor": "Bosch",
    "product": "Monitorwall",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "10.00.0164"
      }
    ]
  },
  {
    "vendor": "Bosch",
    "product": "VJD-7513",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "10.40.0055"
      }
    ]
  },
  {
    "vendor": "Bosch",
    "product": "VJD-7523",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "versionType": "custom",
        "lessThanOrEqual": "10.40.0055"
      }
    ]
  }
]

Source	Link
psirt	www.psirt.bosch.com/security-advisories/BOSCH-SA-092656-BT.html

21 Nov 2024 08:02Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

EPSS0.00083

CWE-703

bosch bt software api dos cve-2023-32230 nvd