Approved changes feed: RSS · Atom

cpe:2.3:h:bosch:smart_home_controller:*:*:*:*:*:*:*:*

part: h version: * update: *

VendorBosch (fd8ddba2-7d59-56e9-89d8-6fcadc94214e)
ProductSmart Home Controller (c539822b-f8e0-5157-a3ba-fb160f4b2b9f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-11895 not_vulnerable 2026-06-08 05:12:38.279525 Improper access control in the JSON-RPC interface of the Bosch Smart Home Controller (SHC)
MEDIUM (5.3)
A potential improper access control vulnerability exists in the JSON-RPC interface of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in a successful denial of service of the SHC and connected sensors and actuators. In order to exploit the vulnerability, the adversary needs to have successfully paired an app or service, which requires user interaction.
Published: 2019-05-29T20:07:39.228Z
Updated: 2024-09-16T18:03:37.169Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.