CVE-2019-11897

Name of the Vulnerable Software and Affected Versions ProSyst mBS SDK versions prior to 8.2.6 Bosch IoT Gateway Software versions prior to 9.3.0

Description A Server-Side Request Forgery (SSRF) issue in the backup and restore functionality allows a remote attacker to forge GET requests to arbitrary URLs. This could potentially enable an attacker to read sensitive zip files from the local server.

Recommendations For ProSyst mBS SDK versions prior to 8.2.6, update to version 8.2.6 or later to resolve the issue. For Bosch IoT Gateway Software versions prior to 9.3.0, update to version 9.3.0 or later to resolve the issue.