Lucene search

[email protected]NVD:CVE-2019-11602

HistoryAug 21, 2019 - 8:15 p.m.

CVE-2019-11602

2019-08-2120:15:12

CWE-209

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.2

Confidence

High

EPSS

0.002

Percentile

51.8%

JSON

Leakage of stack traces in remote access to backup & restore in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.2.0 allows remote attackers to gather information about the file system structure.

Affected configurations

Nvd

Node

boschiot_gateway_softwareRange<9.2.0

boschprosyst_mbs_sdkRange<8.2.6

VendorProductVersionCPE
boschiot_gateway_software*cpe:2.3:a:bosch:iot_gateway_software:*:*:*:*:*:*:*:*
boschprosyst_mbs_sdk*cpe:2.3:a:bosch:prosyst_mbs_sdk:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
bosch	iot_gateway_software	*	cpe:2.3:a:bosch:iot_gateway_software::::::::
bosch	prosyst_mbs_sdk	*	cpe:2.3:a:bosch:prosyst_mbs_sdk::::::::

References

psirt.bosch.com/Advisory/BOSCH-SA-562575.html

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.2

Confidence

High

EPSS

0.002

Percentile

51.8%

JSON

Related for NVD:CVE-2019-11602

cvelist1 prion1 cve1