Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: Bosch Smart Home Controller 9.8.905 Clear all filters
TI-2019-08921 CVE-2019-11895 · GHSA-5vpm-55vx-4xcf

Improper access control in the JSON-RPC interface of the Bosch Smart Home Controller (SHC)

Priority LOW 26

A potential improper access control vulnerability exists in the JSON-RPC interface of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in a successful denial of service of the SHC and connected sensor…

CVSS 3.1MEDIUM 5.3 Adjacent network No auth No interaction EPSS 0.00981 Published 2019-05-29 Fixed in 9.8.905 CWE-284
TI-2019-08919 CVE-2019-11893 · GHSA-422w-959p-3whv

Incorrect privilege assignment in the app permission update API of the Bosch Smart Home Controller (SHC)

Priority LOW 35

A potential incorrect privilege assignment vulnerability exists in the app permission update API of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in a restricted app obtaining default app permissio…

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00445 Published 2019-05-29 Fixed in 9.8.905 CWE-266
TI-2019-08918 CVE-2019-11892 · GHSA-grxx-cf5f-hrxv

Improper access control in the JSON-RPC interface of the Bosch Smart Home Controller (SHC)

Priority LOW 37

A potential improper access control vulnerability exists in the JSON-RPC interface of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in reading or modification of the SHC's configuration or triggeri…

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.01029 Published 2019-05-29 Fixed in 9.8.905 CWE-284
TI-2019-08917 CVE-2019-11891 · GHSA-ghfv-mcwg-v5xw

Incorrect privilege assignment in the app pairing mechanism of the Bosch Smart Home Controller (SHC)

Priority LOW 36

A potential incorrect privilege assignment vulnerability exists in the app pairing mechanism of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in elevated privileges of the adversary's choosing.

CVSS 3.1HIGH 8.0 Adjacent network No auth User interaction EPSS 0.00538 Published 2019-05-29 Fixed in 9.8.905 CWE-266