Vulnerabilities > Bosch > Access > Medium

DATE CVE VULNERABILITY TITLE RISK
2019-09-12 CVE-2019-11899 Information Exposure vulnerability in Bosch Access 2.1/3.3/3.7
An unauthenticated attacker can achieve unauthorized access to sensitive data by exploiting Windows SMB protocol on a client installation.
network
low complexity
bosch CWE-200
4.0
4.0
2019-09-12 CVE-2019-11898 Use of Hard-coded Credentials vulnerability in Bosch Access 2.1/3.3/3.7
Unauthorized APE administration privileges can be achieved by reverse engineering one of the APE service tools.
network
low complexity
bosch CWE-798
6.5
6.5