Total vulnerabilities in the database
An improper handling of a malformed API answer packets to API clients in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service (DoS) situation. To exploit this vulnerability an attacker has to replace an existing API server e.g. through Man-in-the-Middle attacks.
| Software | From | Fixed in |
|---|---|---|
| bosch / building_integration_system_video_engine | - | 5.0.1.x |
| bosch / bosch_video_management_system | - | 12.0.x |
| bosch / video_management_system_viewer | - | 12.0.x |
| bosch / configuration_manager | - | 7.62.x |
| bosch / divar_ip_7000_r2_firmware | - | 12.0.x |
| bosch / divar_ip_all-in-one_4000_firmware | - | 12.0.x |
| bosch / divar_ip_all-in-one_5000_firmware | - | 12.0.x |
| bosch / divar_ip_all-in-one_6000_firmware | - | 12.0.x |
| bosch / divar_ip_all-in-one_7000_firmware | - | 12.0.x |
| bosch / divar_ip_all-in-one_7000_r3_firmware | - | 12.0.x |
| bosch / intelligent_insights | - | 1.0.3.14.x |
| bosch / _onvif_camera_event_driver_tool | - | 2.0.0.8.x |
| bosch / project_assistant | - | 2.3.x |
| bosch / video_security_client | - | 3.3.5.x |