CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.6. It may be remotely exploitable.
CVE
CVE-2019-11897
Severity
HIGH
CVSS
8.6
EPSS
1.78%
Original NVD Description
A Server-Side Request Forgery (SSRF) vulnerability in the backup & restore functionality in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.3.0 allows a remote attacker to forge GET requests to arbitrary URLs. In addition, this could potentially allow an attacker to read sensitive zip files from the local server.
Related CVEs
Other vulnerabilities affecting the same vendor(s)