Bosch Smart Home Controller Firmware vulnerabilities

6 CVEs affecting Bosch Smart Home Controller Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-11896, published 2019-05-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-11892, published 2019-05-29. High severity, CVSS 8.0. EPSS: 1% chance of exploitation in the next 30 days. A potential improper access control vulnerability exists in the JSON-RPC interface of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in reading or modification of the SHC's…
CVE-2019-11895, published 2019-05-29. Medium severity, CVSS 5.3. EPSS: 1% chance of exploitation in the next 30 days. A potential improper access control vulnerability exists in the JSON-RPC interface of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in a successful denial of service of the SHC…
CVE-2019-11896, published 2019-05-29. High severity, CVSS 7.1. EPSS: 0.7% chance of exploitation in the next 30 days. A potential incorrect privilege assignment vulnerability exists in the 3rd party pairing mechanism of the Bosch Smart Home Controller (SHC) before 9.8.907 that may result in a restricted app…
CVE-2019-11891, published 2019-05-29. High severity, CVSS 8.0. EPSS: 0.5% chance of exploitation in the next 30 days. A potential incorrect privilege assignment vulnerability exists in the app pairing mechanism of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in elevated privileges of the…
CVE-2019-11894, published 2019-05-29. Medium severity, CVSS 5.7. EPSS: 0.5% chance of exploitation in the next 30 days. A potential improper access control vulnerability exists in the backup mechanism of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in unauthorized download of a backup. In order…
CVE-2019-11893, published 2019-05-29. High severity, CVSS 8.0. EPSS: 0.4% chance of exploitation in the next 30 days. A potential incorrect privilege assignment vulnerability exists in the app permission update API of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in a restricted app obtaining…