CVE-2019-11898

Published: Sep 12, 2019Modified: Jun 17, 2026

9.9

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Exploitability: 3.1 / Impact: 6.0

Source: NVD

Description

Unauthorized APE administration privileges can be achieved by reverse engineering one of the APE service tools. The service tool is discontinued with Bosch Access Professional Edition (APE) 3.8.

Affected (1)

Products: Bosch: Access

Bosch

1 product

Access

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Bosch Access	Before 3.8

Related CWEs

CWE-798

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (2)

https://psirt.bosch.com/Advisory/BOSCH-SA-710832.html

Source: psirt@bosch.com

Vendor Advisory

https://psirt.bosch.com/Advisory/BOSCH-SA-710832.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.