CVE-2019-11603 HIGH

CVE-2019-11603: Path traversal in ProSyst mBS SDK and Bosch IoT Gateway Software

Vendor N/A
Product n/a
Published August 21, 2019
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

A HTTP Traversal Attack in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.0.2 allows remote attackers to read files outside the http root.

Key dates

02Disclosure timeline

August 21, 2019 CVE published
September 16, 2024 Record updated