Design/Logic Flaw

2019-02-2213:29:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.9%

JSON

An issue was discovered in the Bosch Smart Camera App before 1.3.1 for Android. Due to improperly implemented TLS certificate checks, a malicious actor could potentially succeed in executing a man-in-the-middle attack for some connections. (The Bosch Smart Home App is not affected. iOS Apps are not affected.)

CPENameOperatorVersion
smart_cameralt1.3.1

CPE	Name	Operator	Version
	smart_camera	lt	1.3.1

References

psirt.bosch.com/Advisory/BOSCH-2019-0202.html