description: An improper handling of a malformed API request to an API server in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service (DoS) situation.
problem types: CWE-703 Improper Check or Handling of Exceptional Conditions
affected:
{
vendor: Bosch
product: Video Recording Manager
versions:
version: 0, status: affected, versionType: custom, lessThanOrEqual: 04.10.0079
}
{
vendor: Bosch
product: Video Streaming Gateway
versions:
version: 0, status: affected, versionType: custom, lessThanOrEqual: 8.1.2.2
version: 9.0.0, status: affected, versionType: custom, lessThanOrEqual: 9.0.0.178
}
{
vendor: Bosch
product: Monitorwall
versions:
version: 0, status: affected, versionType: custom, lessThanOrEqual: 10.00.0164
}
{
vendor: Bosch
product: VJD-7513
versions:
version: 0, status: affected, versionType: custom, lessThanOrEqual: 10.40.0055
}
{
vendor: Bosch
product: VJD-7523
versions:
version: 0, status: affected, versionType: custom, lessThanOrEqual: 10.40.0055
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
]