Bosch Prosyst Mbs SDK vulnerabilities

4 CVEs affecting Bosch Prosyst Mbs SDK, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-11603, published 2019-08-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-11601, published 2019-08-21. High severity, CVSS 7.5. EPSS: 2.7% chance of exploitation in the next 30 days. A directory traversal vulnerability in remote access to backup & restore in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.2.0 allows remote attackers to write or delete…
CVE-2019-11603, published 2019-08-21. High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days. A HTTP Traversal Attack in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.0.2 allows remote attackers to read files outside the http root.
CVE-2019-11897, published 2019-08-21. High severity, CVSS 8.6. EPSS: 1.8% chance of exploitation in the next 30 days. A Server-Side Request Forgery (SSRF) vulnerability in the backup & restore functionality in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.3.0 allows a remote attacker…
CVE-2019-11602, published 2019-08-21. Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days. Leakage of stack traces in remote access to backup & restore in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.2.0 allows remote attackers to gather information about…