PT-2023-25353 · Bosch · Bosch Bt

Publicado 2023-12-18 · Atualizado 2023-12-22 · CVE-2023-35867

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Bosch BT software products (affected versions not specified)

Description The issue is related to the improper handling of malformed API answer packets to API clients, which can lead to a Denial of Service (DoS) situation. An unauthenticated attacker can exploit this by replacing an existing API server, for example, through Man-in-the-Middle attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Enumeração de Fraquezas

CWE-703

Identificadores relacionados

CVE-2023-35867

Produtos afetados

Bosch Bt

Referências · 4

• https://psirt.bosch.com/security-advisories/BOSCH-SA-092656-BT.html · Aviso do Fabricante
• https://t.me/cvenotify/64980 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-35867 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-35867 · Aviso do Fabricante