PT-2019-12556 · Bosch+1 · Bosch Access Professional Edition+1

Oleksii Orekhov · Published 2019-09-12 · Updated 2020-10-08 · CVE-2019-11899

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Bosch Access Professional Edition (APE) version 3.8

Description An unauthenticated attacker can gain unauthorized access to sensitive data by exploiting the Windows SMB protocol on a client installation. Client installations require authorization by the APE administrator.

Recommendations For Bosch Access Professional Edition (APE) version 3.8, ensure that all client installations are properly authorized by the APE administrator to prevent unauthorized access.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2019-11899

Affected Products

Bosch Access Professional Edition

Windows Smb

References · 3

• https://osv.dev/vulnerability/CVE-2019-11899 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-11899 · Security Note
• https://psirt.bosch.com/Advisory/BOSCH-SA-844044.html · Vendor Advisory