PT-2023-25353 · Bosch · Bosch Bt

Published 2023-12-18 · Updated 2023-12-22 · CVE-2023-35867

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Bosch BT software products (affected versions not specified)

Description The issue is related to the improper handling of malformed API answer packets to API clients, which can lead to a Denial of Service (DoS) situation. An unauthenticated attacker can exploit this by replacing an existing API server, for example, through Man-in-the-Middle attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-703

Related Identifiers

CVE-2023-35867

Affected Products

Bosch Bt

References · 4

• https://psirt.bosch.com/security-advisories/BOSCH-SA-092656-BT.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-35867 · Security Note
• https://osv.dev/vulnerability/CVE-2023-35867 · Vendor Advisory
• https://t.me/cvenotify/64980 · Telegram Post