CVE-2019-11894: Improper access control in the backup mechanism of the Bosch Smart Home Controller (SHC)
A potential improper access control vulnerability exists in the backup mechanism of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in unauthorized download of a backup. In order to exploit the vulnerability, the adversary needs to download the backup directly after a backup triggered by a legitimate user has been completed.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-11894?
CVE-2019-11894 is considered a medium severity vulnerability due to improper access controls allowing unauthorized backup downloads.
How do I fix CVE-2019-11894?
To remediate CVE-2019-11894, update the Bosch Smart Home Controller firmware to version 9.8.905 or later.
What systems are affected by CVE-2019-11894?
CVE-2019-11894 affects the Bosch Smart Home Controller firmware versions prior to 9.8.905.
What type of vulnerability is CVE-2019-11894?
CVE-2019-11894 is an access control vulnerability that can lead to unauthorized data exposure.
Can CVE-2019-11894 be exploited remotely?
Yes, CVE-2019-11894 can potentially be exploited remotely if an attacker can access the backup mechanism.