Approved changes feed: RSS · Atom

cpe:2.3:a:bosch:prosyst_mbs_sdk:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBosch (fd8ddba2-7d59-56e9-89d8-6fcadc94214e)
ProductProsyst Mbs Sdk (00fe9a1d-3336-54d7-8f49-c10adb5b89a4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-11897 vulnerable 2026-06-08 05:12:38.281590 Server-side request forgery in the backup & restore functionality of ProSyst mBS SDK and Bosch IoT Gateway Software
HIGH (8.6)
A Server-Side Request Forgery (SSRF) vulnerability in the backup & restore functionality in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.3.0 allows a remote attacker to forge GET requests to arbitrary URLs. In addition, this could potentially allow an attacker to read sensitive zip files from the local server.
Published: 2019-08-21T17:09:52.545Z
Updated: 2024-09-17T03:55:02.429Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11603 vulnerable 2026-06-08 05:12:37.716642 Path traversal in ProSyst mBS SDK and Bosch IoT Gateway Software
HIGH (7.5)
A HTTP Traversal Attack in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.0.2 allows remote attackers to read files outside the http root.
Published: 2019-08-21T19:29:23.032Z
Updated: 2024-09-16T23:46:18.811Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11602 vulnerable 2026-06-08 05:12:37.716282 Leakage of stack traces in the backup & restore functionality of ProSyst mBS SDK and Bosch IoT Gateway Software
MEDIUM (5.3)
Leakage of stack traces in remote access to backup & restore in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.2.0 allows remote attackers to gather information about the file system structure.
Published: 2019-08-21T19:21:38.452Z
Updated: 2024-09-17T00:56:40.970Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11601 vulnerable 2026-06-08 05:12:37.715808 Path traversal in the backup & restore functionality of ProSyst mBS SDK and Bosch IoT Gateway Software
CRITICAL (9.1)
A directory traversal vulnerability in remote access to backup & restore in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.2.0 allows remote attackers to write or delete files at any location.
Published: 2019-08-21T19:09:01.029Z
Updated: 2024-09-16T17:59:22.845Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.