Bosch
Page 2 of 2 — Bosch CVEs from a corpus of 122, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-11899 | High | 7.5 | 2019-09-12 | An unauthenticated attacker can achieve unauthorized access to sensitive data by exploiting Windows SMB protocol on a client installation. With Bosch Access Pr… |
CVE-2019-11898 | Critical | 9.9 | 2019-09-12 | Unauthorized APE administration privileges can be achieved by reverse engineering one of the APE service tools. The service tool is discontinued with Bosch Acc… |
CVE-2019-11603 | High | 7.5 | 2019-08-21 | A HTTP Traversal Attack in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.0.2 allows remote attackers to read files outside the h… |
CVE-2019-11602 | Medium | 5.3 | 2019-08-21 | Leakage of stack traces in remote access to backup & restore in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.2.0 allows remote… |
CVE-2019-11601 | High | 7.5 | 2019-08-21 | A directory traversal vulnerability in remote access to backup & restore in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.2.0 al… |
CVE-2019-11897 | High | 8.6 | 2019-08-21 | A Server-Side Request Forgery (SSRF) vulnerability in the backup & restore functionality in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway S… |
CVE-2019-11896 | High | 7.1 | 2019-05-29 | A potential incorrect privilege assignment vulnerability exists in the 3rd party pairing mechanism of the Bosch Smart Home Controller (SHC) before 9.8.907 that… |
CVE-2019-11895 | Medium | 5.3 | 2019-05-29 | A potential improper access control vulnerability exists in the JSON-RPC interface of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in a… |
CVE-2019-11894 | Medium | 5.7 | 2019-05-29 | A potential improper access control vulnerability exists in the backup mechanism of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in una… |
CVE-2019-11893 | High | 8.0 | 2019-05-29 | A potential incorrect privilege assignment vulnerability exists in the app permission update API of the Bosch Smart Home Controller (SHC) before 9.8.905 that m… |
CVE-2019-11892 | High | 8.0 | 2019-05-29 | A potential improper access control vulnerability exists in the JSON-RPC interface of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in r… |
CVE-2019-11891 | High | 8.0 | 2019-05-29 | A potential incorrect privilege assignment vulnerability exists in the app pairing mechanism of the Bosch Smart Home Controller (SHC) before 9.8.905 that may r… |
CVE-2019-6958 | Critical | 9.1 | 2019-05-29 | A recently discovered security vulnerability affects all Bosch Video Management System (BVMS) versions 9.0 and below, DIVAR IP 2000, 3000, 5000 and 7000, Confi… |
CVE-2019-6957 | Critical | 9.8 | 2019-05-29 | A recently discovered security vulnerability affects all Bosch Video Management System (BVMS) versions 9.0 and below, DIVAR IP 2000, 3000, 5000 and 7000, Video… |
CVE-2019-8952 | Medium | 6.5 | 2019-05-13 | A Path Traversal vulnerability located in the webserver affects several Bosch hardware and software products. The vulnerability potentially allows a remote aut… |
CVE-2019-8951 | Medium | 6.1 | 2019-05-13 | An Open Redirect vulnerability located in the webserver affects several Bosch hardware and software products. The vulnerability potentially allows a remote att… |
CVE-2019-7729 | Low | 3.3 | 2019-02-22 | An issue was discovered in the Bosch Smart Camera App before 1.3.1 for Android. Due to setting of insecure permissions, a malicious app could potentially succe… |
CVE-2019-7728 | High | 7.5 | 2019-02-22 | An issue was discovered in the Bosch Smart Camera App before 1.3.1 for Android. Due to improperly implemented TLS certificate checks, a malicious actor could p… |
CVE-2018-20299 | Critical | 9.8 | 2018-12-19 | An issue was discovered in several Bosch Smart Home cameras (360 degree indoor camera and Eyes outdoor camera) with firmware before 6.52.4. A malicious client… |
CVE-2018-19036 | Critical | 9.8 | 2018-12-17 | An issue was discovered in several Bosch IP cameras for firmware versions 6.32 and higher. A malicious client could potentially succeed in the unauthorized exe… |
CVE-2016-4508 | Medium | 6.1 | 2016-07-06 | Cross-site scripting (XSS) vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML… |
CVE-2016-4507 | Medium | 6.4 | 2016-07-06 | SQL injection vulnerability in Rexroth Bosch BLADEcontrol-WebVIS 3.0.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via unsp… |