Bosch Smart Home Controller Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Bosch Smart Home Controller Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2019-11891 — CVSS 8.0 (high): A potential incorrect privilege assignment vulnerability exists in the app pairing mechanism of the Bosch Smart Home Controller (SHC)…
• CVE-2019-11892 — CVSS 8.0 (high): A potential improper access control vulnerability exists in the JSON-RPC interface of the Bosch Smart Home Controller (SHC) before 9.8.905…
• CVE-2019-11893 — CVSS 8.0 (high): A potential incorrect privilege assignment vulnerability exists in the app permission update API of the Bosch Smart Home Controller (SHC)…
• CVE-2019-11896 — CVSS 7.1 (high): A potential incorrect privilege assignment vulnerability exists in the 3rd party pairing mechanism of the Bosch Smart Home Controller (SHC)…
• CVE-2019-11894 — CVSS 5.7 (medium): A potential improper access control vulnerability exists in the backup mechanism of the Bosch Smart Home Controller (SHC) before 9.8.905…
• CVE-2019-11895 — CVSS 5.3 (medium): A potential improper access control vulnerability exists in the JSON-RPC interface of the Bosch Smart Home Controller (SHC) before 9.8.905…