Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2019-11603

24
FAUCET Score

CVE-2019-11603 describes a critical HTTP Traversal Attack affecting Bosch IoT Gateway Software prior to 9.0.2 and ProSyst mBS SDK prior to 8.2.6. This vulnerability allows unauthenticated remote attackers to read arbitrary files outside the HTTP root directory. With a CVSS score of 7.5 (HIGH), the attack requires no user interaction and has a high impact on confidentiality. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.

Impacted Technologies

VendorProductVersion(s)CPE
< 9.0.2CPE matchmatch criteria
cpe:2.3:a:bosch:iot_gateway_software:*:*:*:*:*:*:*:*
< 8.2.6CPE matchmatch criteria
cpe:2.3:a:bosch:prosyst_mbs_sdk:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

7.5HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
Exploitability Score
3.9
Impact Score
3.6
CvssVersion
3.0

Exploit Intelligence

EPSS Score
2.42%
Probability of exploitation in next 30 days
EPSS Percentile
82.5%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0242 is in the 69th percentile among its peer group of 51,506 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (5)

amazonvendor investigatingvia llm_extracted
apollographqlvendor investigatingvia llm_extracted
dfinityvendor investigatingvia llm_extracted
fleetdmvendor investigatingvia llm_extracted
mathworksvendor investigatingvia llm_extracted

Vendor Advisories (10)

amazonllm-amazon-ecc1c3cfc6440455CRITICAL

Multiple Vulnerabilities in ProSyst mBS SDK and Bosch IoT Gateway Software

Aug 19, 2019
dfinityllm-dfinity-ec0b00f68a8c51c2CRITICAL

Multiple Vulnerabilities in ProSyst mBS SDK and Bosch IoT Gateway Software

Aug 19, 2019
apollographqlllm-apollographql-8f7a25ece28c8792CRITICAL

Multiple Vulnerabilities in ProSyst mBS SDK and Bosch IoT Gateway Software

Aug 19, 2019
mathworksllm-mathworks-c9d17407b9a122c9CRITICAL

Multiple Vulnerabilities in ProSyst mBS SDK and Bosch IoT Gateway Software

Aug 19, 2019
fleetdmllm-fleetdm-00d26eef74f8690dCRITICAL

Multiple Vulnerabilities in ProSyst mBS SDK and Bosch IoT Gateway Software

Aug 19, 2019
mathworksllm-mathworks-f54c9e008514a83bCRITICAL

Multiple Vulnerabilities in Bosch Smart Home Controller

May 29, 2019
fleetdmllm-fleetdm-4882d1cc5c51e163CRITICAL

Multiple Vulnerabilities in Bosch Smart Home Controller

May 29, 2019
amazonllm-amazon-40e5669d200e6efaCRITICAL

Multiple Vulnerabilities in Bosch Smart Home Controller

May 29, 2019
apollographqlllm-apollographql-7723bc6c3438db9cCRITICAL

Multiple Vulnerabilities in Bosch Smart Home Controller

May 29, 2019
dfinityllm-dfinity-fc7b46254a390c3dCRITICAL

Multiple Vulnerabilities in Bosch Smart Home Controller

May 29, 2019

References

psirt.bosch.com / Advisory/BOSCH-SA-562575.html
Vendor Advisory