PT-2019-12410 · Prosyst+1 · Prosyst Mbs Sdk+1

Philip Kazmeier · Publicado 2019-08-21 · Atualizado 2019-10-09 · CVE-2019-11603

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ProSyst mBS SDK versions prior to 8.2.6 Bosch IoT Gateway Software versions prior to 9.0.2

Description A HTTP Traversal Attack allows remote attackers to read files outside the http root.

Recommendations For ProSyst mBS SDK versions prior to 8.2.6, update to version 8.2.6 or later. For Bosch IoT Gateway Software versions prior to 9.0.2, update to version 9.0.2 or later.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2019-11603

Produtos afetados

Bosch Iot Gateway

Prosyst Mbs Sdk

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-11603 · Aviso do Fabricante
• https://psirt.bosch.com/Advisory/BOSCH-SA-562575.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-11603 · Nota de Segurança