Security Advisory

CVE-2019-11896

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-05-29 20:11:00

Last updated 2024-09-16 19:24:49

Assigner bosch

State PUBLISHED

Description

A potential incorrect privilege assignment vulnerability exists in the 3rd party pairing mechanism of the Bosch Smart Home Controller (SHC) before 9.8.907 that may result in a restricted app obtaining default app permissions. In order to exploit the vulnerability, the adversary needs to have successfully paired an app, which requires user interaction.

← Browse all CVEs View on cve.org ↗