CVE-2019-7728

The CVE-2019-7728 entry concerns the Bosch Smart Camera App for Android (before version 1.3.1). The root cause is improperly implemented TLS certificate checks, enabling the possibility of a man-in-the-middle attack on certain connections. Impact is described as partial confidentiality, integrity...

CVE-2019-7728

An issue was discovered in the Bosch Smart Camera App before 1.3.1 for Android. Due to improperly implemented TLS certificate checks, a malicious actor could potentially succeed in executing a man-in-the-middle attack for some connections. The Bosch Smart Home App is not affected. iOS Apps are no...

PT-2019-18727

Name of the Vulnerable Software and Affected Versions Bosch Smart Camera App versions prior to 1.3.1 Description An issue was discovered due to the setting of insecure permissions, allowing a malicious app to potentially retrieve video clips or still images that have been cached for clip sharing...

PT-2019-18726

Name of the Vulnerable Software and Affected Versions Bosch Smart Camera App versions prior to 1.3.1 Description The issue is related to improperly implemented TLS certificate checks, which could allow a malicious actor to execute a man-in-the-middle attack for some connections. Recommendations F...

CVE-2019-7728: Improper Certificate Validation

An issue was discovered in the Bosch Smart Camera App before 1.3.1 for Android. Due to improperly implemented TLS certificate checks, a malicious actor could potentially succeed in executing a man-in-the-middle attack for some connections. The Bosch Smart Home App is not affected. iOS Apps are no...

CVE-2019-7729: Incorrect Permission Assignment for Critical Resource

An issue was discovered in the Bosch Smart Camera App before 1.3.1 for Android. Due to setting of insecure permissions, a malicious app could potentially succeed in retrieving video clips or still images that have been cached for clip sharing. The Bosch Smart Home App is not affected. iOS Apps ar...