CVE-2019-11896

A potential incorrect privilege assignment vulnerability exists in the 3rd party pairing mechanism of the Bosch Smart Home Controller (SHC) before 9.8.907 that may result in a restricted app obtaining default app permissions. In order to exploit the vulnerability, the adversary needs to have successfully paired an app, which requires user interaction.

Score
CVSS 3.1 7.1 High
Status
Modified - psirt@bosch.com
Published
2019-05-29
Last modified
2024-09-16
Weaknesses
CWE-269, CWE-284

Affected products

References

 
 
© AVABIS GmbH privacypolicy about