{"id":"CVE-2019-11602","aliases":["EUVD-2019-3272","GHSA-fv3x-mpf8-9x2h"],"status":"published","title":"Leakage of stack traces in the backup \u0026 restore functionality of ProSyst mBS SDK and Bosch IoT Gateway Software","description":"Leakage of stack traces in remote access to backup \u0026 restore in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.2.0 allows remote attackers to gather information about the file system structure.","severity":{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.01059,"percentile":0.64766,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-209"],"published":"2019-08-21T19:21:38Z","modified":"2026-06-17T02:13:15Z","products":[{"vendor":"bosch","product":"iot_gateway_software"},{"vendor":"bosch","product":"prosyst_mbs_sdk"}],"references":[{"url":"https://psirt.bosch.com/Advisory/BOSCH-SA-562575.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11602"},{"url":"https://github.com/advisories/GHSA-fv3x-mpf8-9x2h"}],"sources":{"cve":[{"id":"CVE-2019-11602","title":"Leakage of stack traces in the backup \u0026 restore functionality of ProSyst mBS SDK and Bosch IoT Gateway Software","description":"Leakage of stack traces in remote access to backup \u0026 restore in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.2.0 allows remote attackers to gather information about the file system structure.","status":"published","published":"2019-08-21T19:21:38.452Z","modified":"2024-09-17T00:56:40.97Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:20:26.416173Z"}],"euvd":[{"id":"EUVD-2019-3272","description":"Leakage of stack traces in remote access to backup \u0026 restore in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.2.0 allows remote attackers to gather information about the file system structure.","status":"published","published":"2019-08-21T19:21:38Z","modified":"2024-09-17T00:56:40Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-03T00:28:54.100116Z"}],"ghsa":[{"id":"GHSA-fv3x-mpf8-9x2h","title":"Leakage of stack traces in remote access to backup \u0026 restore in earlier versions than ProSyst mBS...","description":"Leakage of stack traces in remote access to backup \u0026 restore in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.2.0 allows remote attackers to gather information about the file system structure.","status":"published","published":"2022-05-24T16:54:20Z","modified":"2024-04-11T21:07:30Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-209"],"updated_at":"2026-11-02T14:57:06.932158Z"}],"nvd":[{"id":"CVE-2019-11602","description":"Leakage of stack traces in remote access to backup \u0026 restore in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.2.0 allows remote attackers to gather information about the file system structure.","status":"published","published":"2019-08-21T20:15:12.507Z","modified":"2026-06-17T02:13:15.077Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-209"],"updated_at":"2026-11-02T14:05:23.725587Z"}]}}