CVE-2019-11891: Incorrect privilege assignment in the app pairing mechanism of the Bosch Smart Home Controller (SHC)
A potential incorrect privilege assignment vulnerability exists in the app pairing mechanism of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in elevated privileges of the adversary's choosing. In order to exploit the vulnerability, the adversary needs physical access to the SHC during the attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-11891?
CVE-2019-11891 is considered a high-severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2019-11891?
To address CVE-2019-11891, update your Bosch Smart Home Controller Firmware to version 9.8.905 or later.
Who is affected by CVE-2019-11891?
CVE-2019-11891 affects users of the Bosch Smart Home Controller with firmware versions prior to 9.8.905.
What could an attacker do with CVE-2019-11891?
An attacker exploiting CVE-2019-11891 could gain elevated privileges on the Bosch Smart Home Controller.
What is the app pairing mechanism in relation to CVE-2019-11891?
The app pairing mechanism in the Bosch Smart Home Controller is vulnerable due to incorrect privilege assignments, as noted in CVE-2019-11891.