PT-2019-12410 · Prosyst+1 · Prosyst Mbs Sdk+1

Philip Kazmeier · Published 2019-08-21 · Updated 2019-10-09 · CVE-2019-11603

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ProSyst mBS SDK versions prior to 8.2.6 Bosch IoT Gateway Software versions prior to 9.0.2

Description A HTTP Traversal Attack allows remote attackers to read files outside the http root.

Recommendations For ProSyst mBS SDK versions prior to 8.2.6, update to version 8.2.6 or later. For Bosch IoT Gateway Software versions prior to 9.0.2, update to version 9.0.2 or later.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2019-11603

Affected Products

Bosch Iot Gateway

Prosyst Mbs Sdk

References · 3

• https://osv.dev/vulnerability/CVE-2019-11603 · Vendor Advisory
• https://psirt.bosch.com/Advisory/BOSCH-SA-562575.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-11603 · Security Note