Prosyst Mbs Sdk

prosyst_mbs_sdk

Vendor: Bosch • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-11603 1Bosch 2Iot Gateway Software Prosyst Mbs Sdk Jun 17, 2026 Aug 21, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A HTTP Traversal Attack in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.0.2 allows remote attackers to read files outside the http root.
CVE-2019-11602 1Bosch 2Iot Gateway Software Prosyst Mbs Sdk Jun 17, 2026 Aug 21, 2019 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Leakage of stack traces in remote access to backup & restore in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.2.0 allows remote attackers to gather information about the file system structu...Show more Leakage of stack traces in remote access to backup & restore in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.2.0 allows remote attackers to gather information about the file system structure.Show less
CVE-2019-11601 1Bosch 2Iot Gateway Software Prosyst Mbs Sdk Jun 17, 2026 Aug 21, 2019 N/A· v4 7.5 HIGH· v3 6.4 MEDIUM· v2 A directory traversal vulnerability in remote access to backup & restore in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.2.0 allows remote attackers to write or delete files at any locatio...Show more A directory traversal vulnerability in remote access to backup & restore in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.2.0 allows remote attackers to write or delete files at any location.Show less
CVE-2019-11897 1Bosch 2Iot Gateway Software Prosyst Mbs Sdk Jun 17, 2026 Aug 21, 2019 N/A· v4 8.6 HIGH· v3 5.0 MEDIUM· v2 A Server-Side Request Forgery (SSRF) vulnerability in the backup & restore functionality in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.3.0 allows a remote attacker to forge GET requests...Show more A Server-Side Request Forgery (SSRF) vulnerability in the backup & restore functionality in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.3.0 allows a remote attacker to forge GET requests to arbitrary URLs. In addition, this could potentially allow an attacker to read sensitive zip files from the local server.Show less