Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2019-11896

Incorrect pviilege assignment in the 3rd party pairing mechanism of the Bosch Smart Home Controller (SHC)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
bosch

Description

A potential incorrect privilege assignment vulnerability exists in the 3rd party pairing mechanism of the Bosch Smart Home Controller (SHC) before 9.8.907 that may result in a restricted app obtaining default app permissions. In order to exploit the vulnerability, the adversary needs to have successfully paired an app, which requires user interaction.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bosch Smart Home Controller

  • unspecified to < 9.8.907affected

References