Lucene search
HistoryDec 18, 2023 - 1:15 p.m.
CVE-2023-32230
improper handling
api request
denial of service
bosch bt software
unauthenticated attacker
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
20.7%
An improper handling of a malformed API request to an API server in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service (DoS) situation.
Affected configurations
Node
boschmonitor_wallRange≤10.00.0164
Node
boschvideojet_decoder_7513Match-
boschvideojet_decoder_7513_firmwareRange≤10.40.0055
Node
boschvideojet_decoder_7523Match-
boschvideojet_decoder_7523_firmwareRange≤10.40.0055
Node
boschvideo_recording_managerRange≤04.10.0079
Node
boschvideo_streaming_gatewayRange≤8.1.2.2
ORboschvideo_streaming_gatewayRange9.0.0–9.0.0.178
Related
prion
prion
Input validation
2023-12-18 13:15:00
cve
cve
CVE-2023-32230
2023-12-18 13:15:06
cvelist
cvelist
CVE-2023-32230
2023-12-18 12:58:08
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
20.7%
Related for NVD:CVE-2023-32230