CVE-2019-11897 Server-side request forgery in the backup & restore functionality of ProSyst mBS SDK and Bosch IoT Gateway Software

High 8.6 Published 21 Aug 2019 Updated 17 Sep 2024

Remote attackers can exploit SSRF in backup/restore to forge requests and read sensitive local files, affecting Bosch IoT Gateway and ProSyst mBS SDK users.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2019-11897?

CVE-2019-11897 is a high-severity server-side request forgery vulnerability in Bosch IoT Gateway Software, published on 21 Aug 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A Server-Side Request Forgery (SSRF) vulnerability in the backup & restore functionality in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.3.0 allows a remote attacker to forge GET requests to arbitrary URLs. In addition, this could potentially allow an attacker to read sensitive zip files from the local server.

Weakness: CWE-918

Which versions are affected by CVE-2019-11897?

It affects 2 products.

Products include Bosch Iot Gateway Software, Bosch Prosyst Mbs Sdk.

How do I fix CVE-2019-11897?

No fix has been published for CVE-2019-11897 yet. Limit exposure of the affected software until one is available.

Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.

Is CVE-2019-11897 being exploited?

There is no known exploitation of CVE-2019-11897 in the wild and no public exploit code.

Sources

Also known as GHSA-95r8-f778-2vmc.