CVE-2019-11891

CVE-2019-11891 describes an incorrect privilege assignment vulnerability in the app pairing mechanism of Bosch Smart Home Controllers (SHC) prior to version 9.8.905. This high-severity vulnerability, rated 8.0 CVSS, allows an attacker with physical access to the SHC during the attack to gain elevated privileges, potentially leading to full compromise of confidentiality, integrity, and availability. While the vulnerability requires physical access, its impact is significant. There is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion.