CVE-2019-11896 | BDVDB-2026-117178 Detail

Description#

A potential incorrect privilege assignment vulnerability exists in the 3rd party pairing mechanism of the Bosch Smart Home Controller (SHC) before 9.8.907 that may result in a restricted app obtaining default app permissions. In order to exploit the vulnerability, the adversary needs to have successfully paired an app, which requires user interaction.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12019-05-29Record published in the CVE List.
2. Version 22024-09-16Most recent update recorded in the CVE List.