CVE-2023-35867

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2023
Source publication: Dec 18, 2023
Source updated: Aug 2, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

An improper handling of a malformed API answer packets to API clients in Bosch BT software products can allow an unauthenticated attacker to cause a Denial of Service (DoS) situation. To exploit this vulnerability an attacker has to replace an existing API server e.g. through Man-in-the-Middle attacks.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

BVMS

Vendor: Bosch
Product: BVMS
Platforms: Unknown
Default status: Unknown

BVMS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	12.0.0	None listed

BVMS Viewer

Vendor: Bosch
Product: BVMS Viewer
Platforms: Unknown
Default status: Unknown

BVMS Viewer · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	12.0.0	None listed

Configuration Manager

Vendor: Bosch
Product: Configuration Manager
Platforms: Unknown
Default status: Unknown

Configuration Manager · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	7.62	None listed

DIVAR IP 7000 R2

Vendor: Bosch
Product: DIVAR IP 7000 R2
Platforms: Unknown
Default status: Unknown

DIVAR IP 7000 R2 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	12.0.0	None listed

DIVAR IP all-in-one 5000

Vendor: Bosch
Product: DIVAR IP all-in-one 5000
Platforms: Unknown
Default status: Unknown

DIVAR IP all-in-one 5000 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	12.0.0	None listed

DIVAR IP all-in-one 7000

Vendor: Bosch
Product: DIVAR IP all-in-one 7000
Platforms: Unknown
Default status: Unknown

DIVAR IP all-in-one 7000 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	12.0.0	None listed

DIVAR IP all-in-one 7000 R3

Vendor: Bosch
Product: DIVAR IP all-in-one 7000 R3
Platforms: Unknown
Default status: Unknown

DIVAR IP all-in-one 7000 R3 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	12.0.0	None listed

DIVAR IP all-in-one 4000

Vendor: Bosch
Product: DIVAR IP all-in-one 4000
Platforms: Unknown
Default status: Unknown

DIVAR IP all-in-one 4000 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	12.0.0	None listed

DIVAR IP all-in-one 6000

Vendor: Bosch
Product: DIVAR IP all-in-one 6000
Platforms: Unknown
Default status: Unknown

DIVAR IP all-in-one 6000 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	12.0.0	None listed

Project Assistant

Vendor: Bosch
Product: Project Assistant
Platforms: Unknown
Default status: Unknown

Project Assistant · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	2.3	None listed

Video Security Client

Vendor: Bosch
Product: Video Security Client
Platforms: Unknown
Default status: Unknown

Video Security Client · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	3.3.5	None listed

BIS Video Engine

Vendor: Bosch
Product: BIS Video Engine
Platforms: Unknown
Default status: Unknown

BIS Video Engine · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	5.0.1	None listed

Intelligent Insights

Vendor: Bosch
Product: Intelligent Insights
Platforms: Unknown
Default status: Unknown

Intelligent Insights · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	1.0.3.14	None listed

ONVIF Camera Event Driver Tool

Vendor: Bosch
Product: ONVIF Camera Event Driver Tool
Platforms: Unknown
Default status: Unknown

ONVIF Camera Event Driver Tool · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	custom	Unavailable	2.0.0.8	None listed