CVE-2019-11601

Path traversal in the backup & restore functionality of ProSyst mBS SDK and Bosch IoT Gateway Software

Critical · published August 21, 2019

CVSS v3.0
9.1
EPSS
3%
Percentile
85.8
In the wild
Unconfirmed
What it is

A directory traversal vulnerability in remote access to backup & restore in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.2.0 allows remote attackers to write or delete files at any location.

The record
Technical detail
CVSS v3.0
9.1 · CRITICAL
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02688 · 85.8th percentile
Published
2019-08-21T19:09Z
EPSS history
Timeline
  • 21 AUG 19:09Z
    Path traversal in the backup & restore functionality of ProSyst mBS SDK and Bosch IoT Gateway Software
    cvelistv5