Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2019-11897

Server-side request forgery in the backup & restore functionality of ProSyst mBS SDK and Bosch IoT Gateway Software

A Server-Side Request Forgery (SSRF) vulnerability in the backup & restore functionality in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.3.0 allows a remote attacker to forge GET requests to arbitrary URLs. In addition, this could potentially allow an attacker to read sensitive zip files from the local server.

CVSS 3.0 · 8.6 High EPSS 1.8% KEV · Not listed
Vendors
Bosch
Products
Iot Gateway Software Prosyst Mbs Sdk
CVE-2019-11603

Path traversal in ProSyst mBS SDK and Bosch IoT Gateway Software

A HTTP Traversal Attack in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.0.2 allows remote attackers to read files outside the http root.

CVSS 3.0 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Bosch
Products
Iot Gateway Software Prosyst Mbs Sdk
CVE-2019-11602

Leakage of stack traces in the backup & restore functionality of ProSyst mBS SDK and Bosch IoT Gateway Software

Leakage of stack traces in remote access to backup & restore in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.2.0 allows remote attackers to gather information about the file system structure.

CVSS 3.0 · 5.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Bosch
Products
Iot Gateway Software Prosyst Mbs Sdk
CVE-2019-11601

Path traversal in the backup & restore functionality of ProSyst mBS SDK and Bosch IoT Gateway Software

A directory traversal vulnerability in remote access to backup & restore in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.2.0 allows remote attackers to write or delete files at any location.

CVSS 3.1 · 7.5 High EPSS 2.7% KEV · Not listed
Vendors
Bosch
Products
Iot Gateway Software Prosyst Mbs Sdk