PT-2019-12548 · Bosch · Bosch Smart Home Controller

Philip Kazmeier · Publicado 2019-05-29 · Atualizado 2020-10-06 · CVE-2019-11891

Positive Technologies (AI Summary)

CVSS v3.1

8.0

Alta

Vetor base

AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Bosch Smart Home Controller versions prior to 9.8.905

Description A potential incorrect privilege assignment issue exists in the app pairing mechanism, which may result in elevated privileges. To exploit this, an adversary needs physical access to the device during the attack.

Recommendations For versions prior to 9.8.905, update to version 9.8.905 or later to resolve the issue.

Correção

Improper Privilege Management

Incorrect Privilege Assignment

Enumeração de Fraquezas

CWE-269

CWE-266

Identificadores relacionados

CVE-2019-11891

Produtos afetados

Bosch Smart Home Controller

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-11891 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-11891 · Aviso do Fabricante
• https://psirt.bosch.com/Advisory/BOSCH-SA-662084.html · Aviso do Fabricante