CVE-2019-11898 | Unauthorized APE administration privileges can be achieved b… | CVSS 9.9 CRITICAL

Description

Unauthorized APE administration privileges can be achieved by reverse engineering one of the APE service tools. The service tool is discontinued with Bosch Access Professional Edition (APE) 3.8.

Metadata

CVE ID: CVE-2019-11898
State: PUBLISHED
Assigner: bosch
Reserved: 2019-05-13 00:00 UTC
Published: 2019-09-12 18:23 UTC
Last updated: 2024-09-17 04:09 UTC
Primary CWE: CWE-798
CWE-798 Use of Hard-coded Credentials
Vendor / Product: Bosch / Access Professional Edition
Sources: cve.org · NVD

Severity & Metrics

9.9 CRITICAL CVSS 3.0

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected products (1)

Vendor	Product	Platform	Versions
Bosch	Access Professional Edition	—	unspecified ≤ 3.7

Weakness (CWE)

CWE	Source	Description
CWE-798	cna	CWE-798 Use of Hard-coded Credentials

CVSS scores (1)

Score	Severity	Version	Source	Vector
9.9	CRITICAL	3.0	cna	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References (1)

https://psirt.bosch.com/Advisory/BOSCH-SA-710832.html