CVE-2019-11897

8.6 highEPSS 1.8%

High (8.6) in bosch. EPSS 1.8% chance of exploitation in the next 30 days.

A Server-Side Request Forgery (SSRF) vulnerability in the backup & restore functionality in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.3.0 allows a remote attacker to forge GET requests to arbitrary URLs. In addition, this could potentially allow an attacker to read sensitive zip files from the local server.

Severity

CVSS 3.0

8.6 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
CWE: CWE-918
Published: 2019-08-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

bosch:iot_gateway_software
bosch:prosyst_mbs_sdk

References

https://psirt.bosch.com/Advisory/BOSCH-SA-562575.html
https://psirt.bosch.com/Advisory/BOSCH-SA-562575.html

Check your stack JSON