SB2024010311 - Multiple vulnerabilities in Bosch BT software products

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) Improper Check or Handling of Exceptional Conditions (CVE-ID: CVE-2023-32230)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper handling of a malformed API request to an API server. A remote attacker can cause a denial of service condition.

2) Improper Check or Handling of Exceptional Conditions (CVE-ID: CVE-2023-35867)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper handling of a malformed API answer packets to API clients. A remote attacker can replace an existing API server and cause a denial of service condition.

Remediation

Install update from vendor's website.

References

• https://psirt.bosch.com/security-advisories/BOSCH-SA-092656-BT.html