CVE-2019-11603

HIGH 7.5CVE-2019-11603 · Published 21/08/2019 · updated 17/06/2026

In short

CVE-2019-11603 is a HIGH (CVSS 7.5) vulnerability affecting iot gateway software (bosch), prosyst mbs sdk (bosch).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 84.2% of all vulnerabilities.
Fix: update to 9.0.2, 8.2.6 or later.

Package	Affected versions	Patched versions
iot gateway software bosch	`< 9.0.2`	`9.0.2`
prosyst mbs sdk bosch	`< 8.2.6`	`8.2.6`

Description

A HTTP Traversal Attack in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.0.2 allows remote attackers to read files outside the http root.

References

psirt.bosch.com/Advisory/BOSCH-SA-562575.html · Vendor Advisory

More vulnerabilities in iot gateway software

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free