Unrated severityNVD Advisory· Published May 29, 2019· Updated Sep 16, 2024
Incorrect pviilege assignment in the 3rd party pairing mechanism of the Bosch Smart Home Controller (SHC)
CVE-2019-11896
Description
A potential incorrect privilege assignment vulnerability exists in the 3rd party pairing mechanism of the Bosch Smart Home Controller (SHC) before 9.8.907 that may result in a restricted app obtaining default app permissions. In order to exploit the vulnerability, the adversary needs to have successfully paired an app, which requires user interaction.
Affected products
1- Range: unspecified
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- psirt.bosch.com/Advisory/BOSCH-SA-662084.htmlmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.