High severity8.0NVD Advisory· Published May 29, 2019· Updated Jun 17, 2026
CVE-2019-11893
CVE-2019-11893
Description
A potential incorrect privilege assignment vulnerability exists in the app permission update API of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in a restricted app obtaining default app permissions. In order to exploit the vulnerability, the adversary needs to have successfully paired an app with restricted permissions, which required user interaction.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3unspecified+ 1 more
- (no CPE)range: unspecified
- (no CPE)range: <9.8.905
- cpe:2.3:o:bosch:smart_home_controller_firmware:*:*:*:*:*:*:*:*Range: <9.8.905
Patches
Vulnerability mechanics
References
1- psirt.bosch.com/Advisory/BOSCH-SA-662084.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.