Vulnerabilities > Bosch > Smart Home Controller Firmware

DATE CVE VULNERABILITY TITLE RISK
2019-05-29 CVE-2019-11896 Improper Privilege Management vulnerability in Bosch Smart Home Controller Firmware 9.8.905
A potential incorrect privilege assignment vulnerability exists in the 3rd party pairing mechanism of the Bosch Smart Home Controller (SHC) before 9.8.907 that may result in a restricted app obtaining default app permissions.
high complexity
bosch CWE-269
7.1
2019-05-29 CVE-2019-11895 Unspecified vulnerability in Bosch Smart Home Controller Firmware
A potential improper access control vulnerability exists in the JSON-RPC interface of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in a successful denial of service of the SHC and connected sensors and actuators.
high complexity
bosch
5.3
2019-05-29 CVE-2019-11894 Unspecified vulnerability in Bosch Smart Home Controller Firmware
A potential improper access control vulnerability exists in the backup mechanism of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in unauthorized download of a backup.
low complexity
bosch
5.7
2019-05-29 CVE-2019-11893 Improper Privilege Management vulnerability in Bosch Smart Home Controller Firmware
A potential incorrect privilege assignment vulnerability exists in the app permission update API of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in a restricted app obtaining default app permissions.
low complexity
bosch CWE-269
8.0
2019-05-29 CVE-2019-11892 Unspecified vulnerability in Bosch Smart Home Controller Firmware
A potential improper access control vulnerability exists in the JSON-RPC interface of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in reading or modification of the SHC's configuration or triggering and restoring backups.
low complexity
bosch
8.0
2019-05-29 CVE-2019-11891 Improper Privilege Management vulnerability in Bosch Smart Home Controller Firmware
A potential incorrect privilege assignment vulnerability exists in the app pairing mechanism of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in elevated privileges of the adversary's choosing.
low complexity
bosch CWE-269
8.0