High severity7.1NVD Advisory· Published May 29, 2019· Updated Jun 17, 2026
CVE-2019-11896
CVE-2019-11896
Description
A potential incorrect privilege assignment vulnerability exists in the 3rd party pairing mechanism of the Bosch Smart Home Controller (SHC) before 9.8.907 that may result in a restricted app obtaining default app permissions. In order to exploit the vulnerability, the adversary needs to have successfully paired an app, which requires user interaction.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3unspecified+ 1 more
- (no CPE)range: unspecified
- (no CPE)range: <9.8.907
- cpe:2.3:o:bosch:smart_home_controller_firmware:*:*:*:*:*:*:*:*Range: <9.8.907
Patches
Vulnerability mechanics
References
1- psirt.bosch.com/Advisory/BOSCH-SA-662084.htmlnvdVendor Advisory
News mentions
0No linked articles in our index yet.