CVE-2019-11894 — Improper access control in the backup mechanism of the Bosch Smart Home Controller (SHC)
A potential improper access control vulnerability exists in the backup mechanism of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in unauthorized download…
Published: 2019-05-29 · CVSS: 5.7 · CVSS 3.0
A potential improper access control vulnerability exists in the backup mechanism of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in unauthorized download of a backup. In order to exploit the vulnerability, the adversary needs to download the backup directly after a backup triggered by a legitimate user has been completed.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7