High severity8.0NVD Advisory· Published May 29, 2019· Updated Jun 17, 2026
CVE-2019-11892
CVE-2019-11892
Description
A potential improper access control vulnerability exists in the JSON-RPC interface of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in reading or modification of the SHC's configuration or triggering and restoring backups. In order to exploit the vulnerability, the adversary needs to have successfully paired an app or service, which requires user interaction.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:o:bosch:smart_home_controller_firmware:*:*:*:*:*:*:*:*Range: <9.8.905
<9.8.905+ 1 more
- (no CPE)range: <9.8.905
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
1- psirt.bosch.com/Advisory/BOSCH-SA-662084.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.