CVE-2019-11603

Path traversal in ProSyst mBS SDK and Bosch IoT Gateway Software

High · published August 21, 2019

CVSS v3.0
7.5
EPSS
2%
Percentile
84.0
In the wild
Unconfirmed
What it is

A HTTP Traversal Attack in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.0.2 allows remote attackers to read files outside the http root.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.02420 · 84.0th percentile
Published
2019-08-21T19:29Z
EPSS history
Timeline
  • 21 AUG 19:29Z
    Path traversal in ProSyst mBS SDK and Bosch IoT Gateway Software
    cvelistv5