CVE-2019-7728

An issue was discovered in the Bosch Smart Camera App before 1.3.1 for Android. Due to improperly implemented TLS certificate checks, a malicious actor could potentially succeed in executing a man-in-the-middle attack for some connections. (The Bosch Smart Home App is not affected. iOS Apps are not affected.)

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2019-02-22

Last modified

2024-08-04

Weaknesses

CWE-295

Affected products

• Smart Camera (Bosch)

References

• https://psirt.bosch.com/Advisory/BOSCH-2019-0202.html