Bosch Access vulnerabilities

2 CVEs affecting Bosch Access, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-11899, published 2019-09-12.

More from Bosch.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-11899, published 2019-09-12. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. An unauthenticated attacker can achieve unauthorized access to sensitive data by exploiting Windows SMB protocol on a client installation. With Bosch Access Professional Edition (APE) 3.8, client…
• CVE-2019-11898, published 2019-09-12. Critical severity, CVSS 9.9. EPSS: 1.1% chance of exploitation in the next 30 days. Unauthorized APE administration privileges can be achieved by reverse engineering one of the APE service tools. The service tool is discontinued with Bosch Access Professional Edition (APE) 3.8.