CVE-2019-11898 allows unauthorized administrative privileges in Bosch Access Professional Edition (APE) versions prior to 3.8. This critical vulnerability, with a CVSS score of 9.9, enables an attacker to gain full control over the system by reverse engineering a discontinued APE service tool. While there are no known public exploits or Metasploit modules, the vulnerability has garnered significant community discussion, indicating awareness and potential interest in developing exploits.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 3.7CPE match | cpe:2.3:a:bosch:access_professional_edition:*:*:*:*:*:*:*:* | ||
< 3.8CPE matchmatch criteria | cpe:2.3:a:bosch:access:*:*:*:*:professional:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 1.0 Bluesky, 0.5 Mastodon, and 1.6 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Hard-coded Credentials in Access Professional Edition 3.7 downwards
Sep 11, 2019Hard-coded Credentials in Access Professional Edition 3.7 downwards
Sep 11, 2019Hard-coded Credentials in Access Professional Edition 3.7 downwards
Sep 11, 2019Hard-coded Credentials in Access Professional Edition 3.7 downwards
Sep 11, 2019Hard-coded Credentials in Access Professional Edition 3.7 downwards
Sep 11, 2019