CVE-2019-11601

HIGH 7.5CVE-2019-11601 · Published 21/08/2019 · updated 17/06/2026

In short

CVE-2019-11601 is a HIGH (CVSS 7.5) vulnerability affecting iot gateway software (bosch), prosyst mbs sdk (bosch).
Chance of exploitation in the next 30 days (EPSS): 2.7%, higher than 85.9% of all vulnerabilities.
Fix: update to 9.2.0, 8.2.6 or later.

Package	Affected versions	Patched versions
iot gateway software bosch	`< 9.2.0`	`9.2.0`
prosyst mbs sdk bosch	`< 8.2.6`	`8.2.6`

Description

A directory traversal vulnerability in remote access to backup & restore in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.2.0 allows remote attackers to write or delete files at any location.

References

psirt.bosch.com/Advisory/BOSCH-SA-562575.html · Vendor Advisory

More vulnerabilities in iot gateway software

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free