Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2019-11602

19
FAUCET Score

CVE-2019-11602 is a medium-severity information disclosure vulnerability affecting Bosch IoT Gateway Software prior to version 9.2.0 and ProSyst mBS SDK prior to 8.2.6. It allows remote attackers to gather information about the file system structure by leaking stack traces during remote access to backup and restore functions. The vulnerability has a CVSS score of 5.3, indicating a network-based attack with low complexity and a low impact on confidentiality, but no impact on integrity or availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
< 9.2.0CPE matchmatch criteria
cpe:2.3:a:bosch:iot_gateway_software:*:*:*:*:*:*:*:*
< 8.2.6CPE matchmatch criteria
cpe:2.3:a:bosch:prosyst_mbs_sdk:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

5.3MEDIUM

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
Exploitability Score
3.9
Impact Score
1.4
CvssVersion
3.0

Exploit Intelligence

EPSS Score
1.06%
Probability of exploitation in next 30 days
EPSS Percentile
61.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0106 is in the 38th percentile among its peer group of 23,725 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (5)

amazonvendor investigatingvia llm_extracted
apollographqlvendor investigatingvia llm_extracted
dfinityvendor investigatingvia llm_extracted
fleetdmvendor investigatingvia llm_extracted
mathworksvendor investigatingvia llm_extracted

Vendor Advisories (10)

amazonllm-amazon-ecc1c3cfc6440455CRITICAL

Multiple Vulnerabilities in ProSyst mBS SDK and Bosch IoT Gateway Software

Aug 19, 2019
dfinityllm-dfinity-ec0b00f68a8c51c2CRITICAL

Multiple Vulnerabilities in ProSyst mBS SDK and Bosch IoT Gateway Software

Aug 19, 2019
apollographqlllm-apollographql-8f7a25ece28c8792CRITICAL

Multiple Vulnerabilities in ProSyst mBS SDK and Bosch IoT Gateway Software

Aug 19, 2019
mathworksllm-mathworks-c9d17407b9a122c9CRITICAL

Multiple Vulnerabilities in ProSyst mBS SDK and Bosch IoT Gateway Software

Aug 19, 2019
fleetdmllm-fleetdm-00d26eef74f8690dCRITICAL

Multiple Vulnerabilities in ProSyst mBS SDK and Bosch IoT Gateway Software

Aug 19, 2019
mathworksllm-mathworks-f54c9e008514a83bCRITICAL

Multiple Vulnerabilities in Bosch Smart Home Controller

May 29, 2019
fleetdmllm-fleetdm-4882d1cc5c51e163CRITICAL

Multiple Vulnerabilities in Bosch Smart Home Controller

May 29, 2019
amazonllm-amazon-40e5669d200e6efaCRITICAL

Multiple Vulnerabilities in Bosch Smart Home Controller

May 29, 2019
apollographqlllm-apollographql-7723bc6c3438db9cCRITICAL

Multiple Vulnerabilities in Bosch Smart Home Controller

May 29, 2019
dfinityllm-dfinity-fc7b46254a390c3dCRITICAL

Multiple Vulnerabilities in Bosch Smart Home Controller

May 29, 2019

References

psirt.bosch.com / Advisory/BOSCH-SA-562575.html
Vendor Advisory