CVE-2019-11891

8.0 highEPSS 0.5%

High (8.0) in bosch smart home controller firmware. EPSS 0.5% chance of exploitation in the next 30 days.

A potential incorrect privilege assignment vulnerability exists in the app pairing mechanism of the Bosch Smart Home Controller (SHC) before 9.8.905 that may result in elevated privileges of the adversary's choosing. In order to exploit the vulnerability, the adversary needs physical access to the SHC during the attack.

Severity

CVSS 3.1

8.0 high

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
CWEs: CWE-269, CWE-266
Published: 2019-05-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

bosch:smart_home_controller_firmware

References

https://psirt.bosch.com/Advisory/BOSCH-SA-662084.html
https://psirt.bosch.com/Advisory/BOSCH-SA-662084.html

Check your stack JSON